from the who-used-my-bandwidth dept.
"Hi OpenBSD users,
i am testing for some days a way to do some dynamic customer accounting with pf.
I did not find a way to dynamically manage rules ala "pfctl -add $rule", then account that rule, then "pfctl -remove $rule".
There are tables that permit to add entry dynamically
but pass out on $ext from
label "$srcaddr:$dstaddr" have labels that remain to "any:any".
Using "pfctl -sl -f /etc/pf.conf" permit to alter the rules set. Nevertheless pfctl switch statement reload the rules set, then show all labeled rules ie show only zeroed labeled rules.
Is there someone else that succed with or is interrested by such things?"
A quick google on my part turned up little on dynamic persistent per-(user|customer) accounting. The most promising is SASacct:
. What are other ISP users doing to account customer use via pf?