From owner-freebsd-questions  Fri Dec 21 16:53:11 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from cactus.fi.uba.ar (cactus.fi.uba.ar [157.92.49.108])
	by hub.freebsd.org (Postfix) with ESMTP id E47D537B417
	for <freebsd-questions@FreeBSD.ORG>; Fri, 21 Dec 2001 16:53:07 -0800 (PST)
Received: from cactus.fi.uba.ar (cactus.fi.uba.ar [157.92.49.108])
	by cactus.fi.uba.ar (8.11.6/8.11.6) with ESMTP id fBM0qqA88156;
	Fri, 21 Dec 2001 21:52:53 -0300 (ART)
	(envelope-from fgleiser@cactus.fi.uba.ar)
Date: Fri, 21 Dec 2001 21:52:52 -0300 (ART)
From: Fernando Gleiser <fgleiser@cactus.fi.uba.ar>
To: Teo Carlsson <dyn_dns_sweden@hotmail.com>
Cc: <freebsd-questions@FreeBSD.ORG>
Subject: Re: ipf quiestion
In-Reply-To: <F163MzfoV1qdiixjnzi0000bd12@hotmail.com>
Message-ID: <20011221214330.Q84639-100000@cactus.fi.uba.ar>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=ISO-8859-1
Content-Transfer-Encoding: QUOTED-PRINTABLE
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

On Fri, 21 Dec 2001, Teo Carlsson wrote:

> Hello i wonder if ipf can log and see what type of pages users are visiti=
ng.
>
> We want to check if they are pornsurfing or serious surfers?

No. ipf works at TCP/IP level, it cant understand HTTP requests. If you
want to audit  HTTP traffic use an aplication level proxy, like squid.

You can install it from the ports.

Squid has several other advantages: better performance (due to caching),
you can do filtering based on url type, method, IP, domain, user
authentication (plain file, SMB, ldap, etc), file type and so on.

You can combine both and configure ipf to allow only http requests
originating from the proxy server, this way you can audit and control
which sites your users are visiting. You can even configure ipf and squid t=
o
do transparent proxying.

Go to http://www.squid-cache.org for more info.


=09=09=09Fer


>
> /Teo
>
>
> _________________________________________________________________
> MSN Photos =E4r det enklaste s=E4ttet att dela ut, redigera=A0och skriva =
ut foton.
> http://photos.msn.se/Support/WorldWide.aspx
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message