count traffic of web services

From: Fabian Lienert (lienert_at_mitlinks.ch)
Date: 08/19/03 

Date: Tue, 19 Aug 2003 08:49:49 +0200

Dear Security Gurus,

I am doing several web hosting on debian with ssl, so each customer has
its own ip address.

I am asking myself if it is sufficient having an iptables incoming accept rule
on each ip on port 80 and 443 for counting all the traffic that went
throught each ip addresses.
With iptables -L -v I can count the traffic:
  1706 102K ACCEPT tcp -- any any anywhere <ip-address>
tcp dpt:www state NEW,RELATED,ESTABLISHED
    47 2820 ACCEPT tcp -- any any anywhere <ip-address>
tcp dpt:https state NEW,RELATED,ESTABLISHED

Do I do not need any outgoing rule? I think as long as I am connected to a webserver,
the connection on the server is at port 80 or 443 and the data flows back to me throught
the connection, I started.

What about counting traffic of qmail on <ip-address>? Incoming would be the same as above
on port 25, but what if qmail is sending mails? In this case I have to think about
outgoing traffic, right?

Thanks for help in advance!
Fabian Lienert

Relevant Pages

  • count traffic of web services
    ... Do I do not need any outgoing rule? ... the connection on the server is at port 80 or 443 and the data flows back to me throught ... What about counting traffic of qmail on? ...
    (comp.os.linux.networking)
  • Re: Correction
    ... Normally to physically disconnect is just a matter of reaching for the ... >> I have an ADSL connection which polls my computer from time to time, ... > disallow each and every port with Windows Firewall? ...
    (microsoft.public.windowsxp.messenger)
  • Re: Using Remote Desktop From an SBS Domain
    ... when you tried to RDP while attached directly to a port on your router? ... Internet to initiate an IP conversation with your computer. ... This situation is different than if you ran your own NAT connection sharing ...
    (microsoft.public.windows.server.sbs)
  • Re: Still cant connect to RWW or OWA remotely
    ... it certainly appears to be something about the SBS configuration. ... Meridian.local Ethernet adapter Local Area Connection: ... Windows SMALL BUSINESS SERVER 2003 Windows IP Configuration ... 192.168.254.254) directly to a port on the router and then ...
    (microsoft.public.windows.server.sbs)
  • Re: Still cant connect to RWW or OWA remotely
    ... it certainly appears to be something about the SBS configuration. ... Meridian.local Ethernet adapter Local Area Connection: ... Windows SMALL BUSINESS SERVER 2003 Windows IP Configuration ... 192.168.254.254) directly to a port on the router and then ...
    (microsoft.public.windows.server.sbs)
Quantcast