Netgate SG-1000 microFirewall

Author Topic: Squid + MAC adresses + mailreport  (Read 89 times)

0 Members and 1 Guest are viewing this topic.

Offline Leopard2E

  • Newbie
  • *
  • Posts: 1
  • Karma: +0/-0
    • View Profile
Squid + MAC adresses + mailreport
« on: February 22, 2018, 01:56:09 pm »

In a tourism environment we have
  - 1 FW with Captive Portal (+ bandwidth restriction) - guests
  - 4 FW with traffic shaping (limiters + queues) - offices
In order to avoid problems with authorities we have to record some info otherwise we will be responsible for any use of our connections.

I would like to:
  - Get the arp table and dhcp logs (in order to have all the mac&ip info). Enough?
  - Get the captive portal authentication log which I suppose contains relevant info
  - Get the “navigation” log (visited urls)
  - Send it by email once a week

I think I should go this way:
  - install squid (transparent proxy) and light squid
  - install mailreport and configure in System / Advanced / Notifications & Status / Email Reports
  - modify squid to log mac addresses like this: -> otherwise I will see IPs which rotate frequently (few people change their mac address)
  - send weekly reports with the dhcp log, captive portal authentication, arp table (how?) and light squid logs (lighttpd_lightsquid?)
  - rotate squid logs monthly

Is this possible? Can you point me to commands for mail report?


PD Update: After installing Squid the limiters queues do not limit bandwith anymore... Tried in Kbps and Mbps. Also tried with squid normal transparent and quid iptomac. Any workaround?
« Last Edit: February 22, 2018, 03:17:23 pm by Leopard2E »