If I could list that which iptables rule has how many matched packets, then I could create a better/faster iptables script that's faster. That rule would be at top/first that has the more packets matched.
Tell me more
×
Unix & Linux Stack Exchange is a question and answer site for
users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.
|
See also this article: http://greenmice.info/en/node/127, there are some other tips. |
|||
|
|
|
I wouldn't spend all that much time worrying about this. If you have a rule which you know gets hit extremely often (related,established rule for example), you could put that near the top. But in general I highly doubt that any more optimization will really pay off in any way. |
|||
|
|
