Re: logy za FW

From: Michal Illich (illich@empyreum.cz)
Date: 26. 05. 2001, 11:10 CEST

Previous message: Altair: "RE: logy za FW"
In reply to: Miroslav Vecerny: "logy za FW"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

>         Vec je vcelku jednoducha, jedna sa o web servre, prevadzkovane
> za firewallom, realizovanym pomocou linuxovej masiny, ktora preklada
> poziadavky z intranetu do vnutornej siete a naopak, vo vnutornej sieti

	(1) Na firewallu si nastavte, aby zapisoval do hlavicky X-Forwarded-For:
(proste tu puvodni IP).
	(2) Na webserveru si nastavte vlastni format logu, ktery misto IP vypise tu
X-Forwared
	(3) Pokud by se vam z logu nepodarilo vyradit puvodni IP, byl by nutny jeste
nejaky regularni vyraz, ktery to prehazi sam (to ale zrejme potreba nebude)
	(4) Pouzijte nejakou tool nebo audit.

	Preji prijemny den,

Michal Illich, Empyreum
http://openaudit.cz/

Previous message: Altair: "RE: logy za FW"
In reply to: Miroslav Vecerny: "logy za FW"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.2 : 10. 08. 2001, 11:42 CEST