Re: NAT logging

El mar, 31 de 08 de 2004 a las 12:13, Erik Norgaard escribiÃ:
> Hi,
>
> Recent changes in danish law requires ISP's - even small ones - to log 
> traffic data and store it for a year. The following needs to be logged:
>
> * Initiation of connection, source and destination address
> * Termination of connection
> * Change of identity, (eg. when using NAT)
>
> The first part is easy. The second can be done. The problem is the 
> third: All firewalls I know of does not have the ability to log entries 
> in the NAT table, all three tasks could be done if a log was written 
> when a connection was entered into the NAT table and when it was removed.
>
> Does anyone know of a firewall product with this capability?

Iptables in Linux can do it. You just have to create the rules in
the NAT table to log the traffic you want to.

> Thanks, Erik
-- 
Jose Maria Lopez Hernandez
Director Tecnico de bgSEC
jkerouac@bgsec.com
bgSEC Seguridad y Consultoria de Sistemas Informaticos
http://www.bgsec.com
ESPAÃA

The only people for me are the mad ones -- the ones who are mad to live,
mad to talk, mad to be saved, desirous of everything at the same time,
the ones who never yawn or say a commonplace thing, but burn, burn, burn
like fabulous yellow Roman candles.
                -- Jack Kerouac, "On the Road"