Instant monitering through Squid and reposrting :)

[kartook]

Hi every body Thanks for giving the chance

Q 1 .

How to install the transparent proxy sever on 10.10.10.0/255.255.255.0 Network  .

Q 2 .

How to know the gtalk  ( web and client ) ,Yahoo ( client and web ) , ICQ ,Pidgin chat timings ( Duration only )  ?

Q 3 .

Need to different types of reports ? recommend top3 squid report generators ?

Q 4 .

HOw to Exclude particular user  from proxy ( bypass the proxy monitoring )

I will tell you i am newbie  

[kaushalpatel1982]

1. How to install the transparent proxy sever on 10.10.10.0/255.255.255.0 Network  .
Ans : I assume that you can configure squid proxy by yourself. You need to configure ACL that allow the said network in squid.conf.
Use IPtables following command to complete it:

To insert to the top of all the IPtables rules
#iptables -t nat -I PREROUTING -s 10.10.10.0/24 -p tcp --dport 80 -j REDIRECT --to-port <Your proxy port>

To insert to the bottom of all the IPtables rules
#iptables -t nat -A PREROUTING -s 10.10.10.0/24 -p tcp --dport 80 -j REDIRECT --to-port <Your proxy port>

2.How to know the gtalk  ( web and client ) ,Yahoo ( client and web ) , ICQ ,Pidgin chat timings ( Duration only )  ?
Ans: You can not messure duration of the messanger timing as well as individual websites. The reports provide you the site list and the access time of the sites.

3. Need to different types of reports ? recommend top3 squid report generators ?
Ans: There are many types of report generater available. You can configure SARG or MYSAR for Local reporting and IVIEW for remote reporting using syslog.

4. HOw to Exclude particular user  from proxy ( bypass the proxy monitoring )?
Ans: Just add one rule on the top of the transperent proxy to just ACCEPT the 80 port traffic for the particular host.
like :

#iptables -t nat -A PREROUTING -s 10.10.10.0/24 -p tcp --dport 80 -j REDIRECT --to-port <Your proxy port>
# iptables -t nat -I PREROUTING -s 10.10.10.100/32 -p tcp --dport 80 -j ACCEPT
# iptables -t nat -I POSTROUTING -s 10.10.10.100/32 -d 0.0.0.0/0 -j MASQUERADE
and you bypass the proxy server.

[kartook]

Thanks for the reply

Thanks
K~