Fw4 Counter

[hudra0]

It would be nice to have an option to turn on counter in firewall to quickly check if a rule is working.

[jeverley]

Hi @hudra0, you should find this this capability now in the latest commits.

You can turn this on for a particular rule by setting the new boolean config option of 'counter' to 1.

Let me know if you've any feedback/thoughts.

[hudra0]

Let me know if you've any feedback/thoughts

Just switched to your branch and it works, thank you. The only concern I have is that new users could be confused as the rule counters only count matched connections and not every single packet.

Maybe a hint in the readme would be helpful and reduce questions regarding counters not increasing.

Or is there any way to get counters for every packet directly from conntrack?

Another thing that would also be helpful is some sort of status + maybe a help section with all the possible init.d commands….

[jeverley]

Good suggestion regarding the readme, when it comes to per-connection 'reporting' I wonder if something like the @ldir-EDB0 's patch in openwrt/luci@183db13 might better meet people's expectations?

It displays the stored DSCP alongside other stats in Luci's existing 'realtime graphs -> connections' page

[hudra0]

I think this would be a solid addition/replacement to the fw4 counter but this is just my personal opinion.

[francisuk1989]

It displays the stored DSCP alongside other stats in Luci's existing 'realtime graphs -> connections' page

I would like to this feature to see what Marked 👍

[Fail-Safe]

@jeverley @hudra0 @francisuk1989 I updated @ldir-EDB0's patch to work with the latest snapshot builds. It has the ability to search/filter on the DSCP value as well.

Link here: openwrt/luci@183db13#commitcomment-156079511