General Questions - WebUI

[KAI]

Hello - What does the "Accounting" option within the rule configuration do? Also, is there a way within the GUI to run an actual report of any kind?

 

[Carles Munyoz]

Hi Kai,
This kind of rules are for traffic accounting purposes.

For example, imagine that you want to create a Grafana graphic for account all the web traffic (http and https) that goes through your firewall. For it you can create an accounting rule like this in the FORWARD chain of your firewall:


The compilation of this rule will be:

$IPTABLES -N FWCRULE106311.ACC
$IPTABLES -A FWCRULE106311.ACC -j RETURN
$IPTABLES -A FORWARD -p tcp -m multiport --dports 80,443 -j FWCRULE106311.ACC

The chain FWCRULE106311.ACC will be created and it will do nothing with the matching traffic, it will only account the number of packets and bytes that matches it.

With the next command you can get the amount of packets and bytes that the chain has matched and then inject it into the Grafana graph:

# iptables -L FWCRULE106311.ACC -v
Chain FWCRULE106311.ACC (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    4   567 RETURN     all  --  any    any     anywhere             anywhere

 

[KAI]

Thanks! This is very helpful. Do you have any guidance on how to intergrate fwcloud with Grafana?

 

[Carles Munyoz]

Sorry but not at this moment.
But if you want to create such documentation we will be pleased to include it in our documentation.