Fwd: WWW Proxy/Traffic Analyzer

[Don Munyak]

---------- Forwarded message ----------
From: Bachilo Dmitry <bocha at academ.org>
Date: Jan 10, 2007 10:54 PM
Subject: Re: WWW Proxy/Traffic Analyzer
To: freebsd-questions at freebsd.org

> We have an employee who spends quite a bit of time on the net and
> currently have no way of analyzing where they go.  Are there any decent
> proxy servers that I can put them on to see where they are going?
>
> -Tom

I have recently installed Dansguardian + Squid onto 6.1-REALEASE. My
approach was not as an in-line, but rather transparent mode. Our proxy
server is in the DMZ. All outbound http requests from the LAN are
redirected at the firewall to the server in the DMZ. This approach
eliminates users ability to by-pass the proxy, as no changes to
browser settings are made.

If the proxy dies, all I need to do (temporarily) is disable the
redirector in the firewall.

So far, this setup works rather well. There are plenty of free tools
for analyzing the logs. The plus for us, by incorporating
Dansguardian, is the ability to further customize what is acceptable
and what's not.

~ Don