On Fri, 2004-10-01 at 08:41, Vicent Gozalbes wrote:
> Hello to all, I'm new in this list.
> I have an iptables firewall running in a Debian system in my Office.
> I would like to view all websites visited (IPs or name) for my workers.
> it's possible with iptables without using a proxy-cache, isn't it?
if IP's are OK--you can use:
iptables -A FORWARD -p tcp --syn -s $INSIDE_NET --dport 80 \
-j LOG --log-prefix "HTTP REQUEST: "
you need to place that rule at a point in your ruleset where it will
actually catch the traffic you're interested in.
-j
disclaimer: the rules contained in this message are meant to illustrate
the requested functionality only, and not intended as a recommendation
of best practices. never execute any commands without fully
understanding the implications.
--
Jason Opperisano <opie@xxxxxxxxxxx>
