Firewall Proxy?? Whats yours?

Road · 10-10-2002, 06:27 PM

I am looking for a buisiness class firewall/router that will share access to the I-net.

Not that big of a deal but what I need is tracking. I want to know who is going where how long and when. Anybody have some recomendations out there?

Road

RijilV · 10-10-2002, 08:10 PM

for web the easiest thing is to setup a squid proxy...preferably not on your firewall...

otherwise you can use iptables to log all syn packets outbound, and parse the logs out to make them purdy...

DavidPhillips · 10-11-2002, 02:05 AM

squid

/etc/squid/squid.conf

httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

/etc/sysconfig/iptables

use the local lan eth?

-A PREROUTING -i eth2 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128

/etc/rc.d/init.d/iptables restart

/etc/rc.d/init.d/squid restart