Client address on event log and reports

yasantha · 04-07-2009, 01:48 AM

My untangle server is placed in front of a proxy server (linux - squid). Untangle is configured in "bridge" mode. The issue is, The Client Address column display only the proxy ip address. It does not display real individual client ip addresses. Is there any solution for this? I want to get all client ip addresses for these reports. Thank you.

yasantha · 04-21-2009, 04:32 AM

It seems that no one has encountered with above problem. I coudnt find any remedy for that. I just like to explain my setup further.

All the users are accessing internet through proxy server. Proxy is configured to do authentication with a Active Directory server (ntlm_auth). Users can access internet by providing their AD username and password. The untangle server is placed between proxy server and internet router in transparent mode. What I want to get done is, I want to see individual user names in untangle reports. Instead, there is only proxy ip address in untangle reports. How can I overcome this issue? Pls help

Shokilla · 04-30-2009, 07:18 AM

Is it possible that because the Untangle box is located between the proxy server and your internet router your Untangle Bridge assumes all traffic is comming from the proxy server? I would bridge between the LAN and the proxy server just to see if that makes a difference.

dilipkhanolkar · 05-21-2009, 01:57 AM

What you are seeing is perfect all the queries that are fired are done by the proxy server so you will see the proxy server as the source & not the real clients you will only the real client ip's from the proxy server or the only way out is that you need to make untangle server as a proxy instead or using a squid server as a proxy.

04-07-2009, 01:48 AM	#1 (permalink)
yasantha Newbie Join Date: Apr 2009 Posts: 2	Client address on event log and reports My untangle server is placed in front of a proxy server (linux - squid). Untangle is configured in "bridge" mode. The issue is, The Client Address column display only the proxy ip address. It does not display real individual client ip addresses. Is there any solution for this? I want to get all client ip addresses for these reports. Thank you.

04-30-2009, 07:18 AM	#3 (permalink)
Shokilla Newbie Join Date: Feb 2008 Posts: 5	Not Sure But... Is it possible that because the Untangle box is located between the proxy server and your internet router your Untangle Bridge assumes all traffic is comming from the proxy server? I would bridge between the LAN and the proxy server just to see if that makes a difference.

04-21-2009, 04:32 AM	#2 (permalink)
yasantha Newbie Join Date: Apr 2009 Posts: 2	It seems that no one has encountered with above problem. I coudnt find any remedy for that. I just like to explain my setup further. All the users are accessing internet through proxy server. Proxy is configured to do authentication with a Active Directory server (ntlm_auth). Users can access internet by providing their AD username and password. The untangle server is placed between proxy server and internet router in transparent mode. What I want to get done is, I want to see individual user names in untangle reports. Instead, there is only proxy ip address in untangle reports. How can I overcome this issue? Pls help

05-21-2009, 01:57 AM	#4 (permalink)
dilipkhanolkar Newbie Join Date: May 2009 Posts: 8	What you are seeing is perfect all the queries that are fired are done by the proxy server so you will see the proxy server as the source & not the real clients you will only the real client ip's from the proxy server or the only way out is that you need to make untangle server as a proxy instead or using a squid server as a proxy.