Hello,
I am stuck while trying to log a NAT box to a sufficiently high level.
The NAT box caters for up to several hundred users in a large
organisation (University of Bristol) so thorough logging of all
connections is essential, for traceability and our legal requirements.
Basically I need to know which internal (private) address was talking to
which external IP address on which ports at which time.
My NAT solution is implemented in iptables and works fine. The logging
partially works but the problem is this: I am logging pre NAT, and my
log shows the internal IP and port, and the destination IP and its port.
But it does not show the port used by the NAT box to talk to the
external IP. Logging post NAT would never detect any packets. If I was
able to long pre and post NAT I would be able to log all the information
I need.
I did some googling and spoke to colleagues but I have been unable to
log all the required information. Can anyone shed any light on this?
Does anyone either know how to make this work, or can propose a better
solution?
Thanks,
Jonathan
----------------------
Jonathan Gazeley
ResNet | Wireless Team
Information Services
University of Bristol
----------------------
-
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
