[sllug-members]: Transparent Proxy Log Files

Mike mike at mikenbob.com
Sun Nov 5 16:42:41 MST 2006


I have been banging my head on this for a while now. I hope you can help 
me.

I have a OpenWRT router with IPTables set up to route all http traffic 
though another box running tinyproxy and dansguardian using the 
transparent proxy setup found on 
http://tldp.org/HOWTO/TransparentProxy-6.html.  It works great, with 
only a couple problems. A few apps, like google browser sync, seem to 
not like the transparent way of doing things. Standard proxy settings 
work just fine, but transparent doesn't. I also hate the fact that all 
my logs now show the IP Address of the router instead of the actual client.

I chose transparent proxy setup because I have a lot of 
friends/family/etc. that come to the house and use the Internet on their 
own computers (game nights, friends on laptops, etc.) I also have my own 
laptop that I use at home and work, so I didn't want to have to change 
the proxy settings every time, and I didn't want to have my friends have 
to mess with their proxy settings each time they come... BUT I want all 
the access filtered and logged.

So I have a few questions for the group.

1 - Is the transparent proxy the best way to force all traffic through 
the proxy/filter or are there better ways to accomplish this task?
2 - Is there any way with transparent proxy to still show the client IP 
Address in the log files?
3 - Without debating if access in my home should be filtered, are there 
better ways to filter access for a family than dansguardian with 
multiple computers, and OS's? (Currently I have windoze, OS X, and Linux)
4 - Finally, a little off-topic, but I want to keep track (log??) other 
types off internet usage in my home like chatting or other programs. Do 
I need another proxy for other internet access that logs and gives me 
access control lists? What's the best way to go here?

I appreciate all your help. You have all been great in the past.


More information about the sllug-members mailing list