For those who dont know: IPACCT is a set of patches and utils which allow
user level (as in a user by user basis, the functionality is in the
kernel) accounting and quotas of network traffic..
This is a major feature for shell servers and such..
For info: http://www.geocities.com/SiliconValley/Lakes/2628/ipacct.html
I would guess that this should be reimplimented into the current IP
firewall system.. In the future it would be neat to see a privliged daemon
that can do ident requests on behalf on the kernel to allow user 'grained'
accounting, firewalling, QOS, quotas, and traffic shaping even for traffic
on remote computers.. Scarry though..
It would also be nice to have a traffic shaping firewall option.. Playing
with all those routes isn't always fun.. (Furthermore, it's difficult
(impossible?) to force users on the shaping system to use the shaping
interface)