lkml.org 
[lkml]   [2001]   [Apr]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: IP Acounting Idea for 2.5
    On Tue, Apr 17, 2001 at 06:56:42AM +0000, Henning P. Schmiedehausen wrote:
    >
    > Resettable counters in a security sensitive environment are just a
    > call for trouble. That's why you can't reset the SNMP counters on any
    > Cisco device I've encountered today. They learned their lesson. Maybe
    > you will, too.

    Well, I'm not sure about which SNTP counters you are talking, but I suppose
    it is not about per-filtering-rule counters, but something like per-interface
    counters, etc.

    There's always a way for somebody with root access to reset the counters of
    a rule:

    just delete and re-insert the rule.

    If somebody wants to reset the counter, he can. If we remove the functionality
    from iptables, people still can - but it's more difficult.

    > Regards
    > Henning

    --
    Live long and prosper
    - Harald Welte / laforge@gnumonks.org http://www.gnumonks.org
    ============================================================================
    GCS/E/IT d- s-: a-- C+++ UL++++$ P+++ L++++$ E--- W- N++ o? K- w--- O- M-
    V-- PS+ PE-- Y+ PGP++ t++ 5-- !X !R tv-- b+++ DI? !D G+ e* h+ r% y+(*)
    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 13:27    [W:0.025 / U:2.152 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site