CentOS - Feb 2013 - SNAT Logging

Hi All,

   I'm running our network with an 10/8 IPv4 subnets, with an SNAT catch all
rule on the iptables firewall to the world.

   Is there a pratical way to log each connection? Maybe an "automatic
hotspot"
wich will assign an "external" IP to each "internal" one,
and log it.

   What are you using folks?

   Thanks,


       Antonio.
  
-- 
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Antonio S. Martins Jr. - Support Analyst | "Only The Shadow Knows     |
| Universidade Estadual de Maring? - Brasil|   what evil lurks in the   |
| NPD - N?cleo de Processamento de Dados   |       Heart of Men!"       |
| E-Mail: asmartins at uem.br / shadow at uem.br | !!! Linux User: 52392 !!!  |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
     "Real Programmers don?t need comments ? the code is obvious."

-- 
Esta mensagem foi verificada pelo sistema de antivirus e
 acredita-se estar livre de perigo.

On Wed, 27 Feb 2013 15:45:01 -0300 (BRT)
Antonio da Silva Martins Junior <asmartins at uem.br> wrote:
> Hi All,
> 
>    I'm running our network with an 10/8 IPv4 subnets, with an SNAT
catch all
> rule on the iptables firewall to the world.
> 
>    Is there a pratical way to log each connection? Maybe an "automatic
hotspot"
> wich will assign an "external" IP to each "internal"
one, and log it.
> 
>    What are you using folks?
Look at the logging options of IPTABLES and just LOG what you want.

http://www.zoominternet.net/~lazydog/iptables-tutorial.html#LOGTARGET


--  
Regards
Robert

Linux
The adventure of a lifetime.

Linux User #296285
Get Counted
http://linuxcounter.net/