Log all connection (from-to-in) LAN
 

Hello,
i'm trying to figure out how can i manage this situation in our office:
my boss wants to log ALL connections between LAN hosts and obviously from LAN to WAN and viceversa, both accepted and rejected connections.
The server that will perform this job have to be behind the firewall, IPCop maybe?
Can you please help me? Hope i was clear :)

Thanks,
dave

iptables??
insert LOG at the top of the chain?

I hope you've got lots of disk space.. ;)