Привет всем. Вопрос такой, стоит Федора 3, на нее поставил пакет IPStat SmallISP демо, но разница с провайдером (ЮТК-узел связи) почти в два раза, iptables такой <div class='indent'># Generated by iptables-save v1.3.0 on Mon Jul 9 22:19:28 2007
*nat
:OUTPUT ACCEPT [1:92]
:POSTROUTING ACCEPT [0:0]
:PREROUTING ACCEPT [1:48]
-A POSTROUTING -j MASQUERADE
COMMIT
# Completed on Mon Jul 9 22:19:28 2007
# Generated by iptables-save v1.3.0 on Mon Jul 9 22:19:28 2007
*mangle
:FORWARD ACCEPT [0:0]
:INPUT ACCEPT [261:23471]
:OUTPUT ACCEPT [382:22212]
:POSTROUTING ACCEPT [382:22212]
:PREROUTING ACCEPT [261:23471]
-A FORWARD -d 192.168.0.16 -m state --state RELATED,ESTABLISHED -j QUEUE
-A FORWARD -d 192.168.0.15 -m state --state RELATED,ESTABLISHED -j QUEUE
-A FORWARD -d 192.168.0.31 -m state --state RELATED,ESTABLISHED -j QUEUE
-A FORWARD -d 192.168.0.38 -m state --state RELATED,ESTABLISHED -j QUEUE
-A FORWARD -d 192.168.0.33 -m state --state RELATED,ESTABLISHED -j QUEUE

COMMIT
# Completed on Mon Jul 9 22:19:28 2007
# Generated by iptables-save v1.3.0 on Mon Jul 9 22:19:28 2007
*filter
:FORWARD ACCEPT [0:0]
:INPUT DROP [0:0]
:OUTPUT ACCEPT [382:22212]
:RH-Firewall-1-INPUT - [0:0]
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -i eth1 -j ACCEPT
-A INPUT -s 192.168.0.30 -j DROP
-A INPUT -p tcp --dport 80 -j DROP
-A INPUT -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -p icmp -m icmp --icmp-type any -j DROP
-A RH-Firewall-1-INPUT -d 224.0.0.251 -p udp -m udp --dport 5353 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
#-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 137 -j ACCEPT
#-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 138 -j ACCEPT
#-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 139 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 53 -j ACCEPT
#-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 25 -j ACCEPT
#-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 110 -j ACCEPT
#-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
#-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT
#-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 3128 -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT
# Completed on Mon Jul 9 22:19:28 2007
</div>

может еще что надо прикрыть, посоветуйте. может кто пользуется таким же биллингом???