Results 1 to 2 of 2

Thread: Squid Network / Client IP logging

  1. #1

    Squid Network / Client IP logging

    I've done plenty of googling readnig of articles but I cannot get my squid setup to log the client ip's.

    I'm not sure if it's even possible with my setup. The squid logs all show :

    Code:
     172.16.108.1 TCP_MISS/200 7330 CONNECT urs.microsoft.com:443 - DIRECT/213.199.170.73 -
    So the gateway ip of 172.16.108.1 and not the actual clients. My log generator can only show "one" user.

    Anyway here is a quick diagram of the network :


    Clients (10.0.1.0-200, Microsoft WinXP, Win2003 domain)

    Proxy Server : 172.16.108.200 (172x range is internal servers only in protected network)

    ADSL Modem (DHCP activated) --> 192.168.1.254


    Right, now the proxy server is a vmware machine located on host with 6 network cards. 3 of the network cards are linked directly only to this proxy server (dedicated)

    Eth0 : 172.16.108.200 (proxy/squid address on port 8080)
    Eth1 : 192.168.1.35 (dhcp lease from adsl modem / gateway)
    eth2: 10.0.1.233 (client ip range


    My routing tables
    Code:
    proxy:~# route -n
    Kernel IP routing table
    
    Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
    192.168.1.0     0.0.0.0         255.255.255.0   U     0      0        0 eth1
    172.16.108.0    0.0.0.0         255.255.255.0   U     0      0        0 eth0
    10.0.1.0        0.0.0.0         255.255.255.0   U     0      0        0 eth2
    0.0.0.0         192.168.1.254   0.0.0.0         UG    0      0        0 eth1
    Everything is working perfectly except for the client logging. I figured it had something to do with the different ip range that the clients were in.

    To test this I made a new client in the 172.x range, this one appeared in my logging with the correct ip.

    But the clients cannot be put in this range . Is there a work-around for this issue? Maybe with the correct routing tables or third party software? Different loggin tool perhaps?

    Or can I have the clients send there ip's with a request towards the proxy server? Or is my only option to set the proxy server in the 10.x range?

    For testing I did add eth2 (10.x) to the proxy server, it didn't make any difference.

  2. #2
    hi
    how r u..............i am recently join this ..........plz tell some steps.................

Similar Threads

  1. syslog client with rsyslog server - remote logging
    By kovadom in forum Linux - Software, Applications & Programming
    Replies: 0
    Last Post: 09-17-2011, 04:01 PM
  2. Diskless thin client network
    By alondro in forum Linux - Hardware, Networking & Security
    Replies: 2
    Last Post: 08-08-2009, 02:11 PM
  3. Squid configuration question. Client => HTTPS => proxy => HTTP => webserver
    By newhere in forum Linux - Software, Applications & Programming
    Replies: 0
    Last Post: 09-06-2008, 04:31 AM
  4. Replies: 0
    Last Post: 04-14-2007, 07:12 AM
  5. Squid logging on a windows network
    By airhead in forum Linux - Hardware, Networking & Security
    Replies: 2
    Last Post: 07-08-2002, 02:07 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •