Hi all,

I configured squid proxy (transperent) and transfered all requests to my gateway to my squid box (different box) using iptables.
the rules are

iptables -t nat -A PREROUTING -i eth1 -s ! <ip address of proxy> -p tcp --dport 80 -j DNAT --to <ip address of proxy : port>

iptables -t nat -A POSTROUTING -o eth1 -s <network address> -d <ip address of proxy> -j SNAT --to <ip address of gateway>

iptables -A FORWARD -s <network address> -d <ip address if proxy> -i eth1 -o eth1 -m state --state NEW,ESTABLISHED,RELATED -p tcp --dport <proxy port> -j ACCEPT

iptables -A FORWARD -d <network address> -s <ip address of proxy> -i eth1 -o eth1 -m state --state ESTABLISHED,RELATED -p tcp --sport <proxy port> -j ACCEPT

It's working fine. But in the access.log it is showing that all the requests are coming from my gateway(firewall).
I want to trace the client ip addresses from which those requests are coming from.

How can I achieve that???

Can anyone help me....

I'm not sure whether if this will help, but I use squid as a reverse proxy, I get client IP's and other details absent from the normal log using the
log_mime_hdrs on
options and pass the log through a script to convert it:

http://www.chriskirkland.net/thought...celerator.html