Page 1 of 1

Transparent Proxy Server for IP monitoring

Posted: Thu Nov 29, 2007 7:32 am
by jd6strings
Hello All!

I've been using Mikrotik for about 3 years now and I've finally run into a situation that I have not been able to figure out where Mikrotik MIGHT work as the solution.

I'd like to know (because I can't seem to figure it out) if it's possible to utilize ROS as a transparent proxy primarily for IP monitoring of our DSL customers. Here's what I want to do:

DSL ROUTER---->TRANS. PROXY---->SWITCH--->EDGE ROUTER---->WWW

I want (if possible) to utilize a transparent proxy (as shown) to monitor traffic in search of IP's of which are potentially infected with a virus.

Is this a possibility?

Thanks as always my friends!

Re: Transparent Proxy Server for IP monitoring

Posted: Fri Nov 30, 2007 2:57 pm
by sergejs
It depends on the traffic provided from DSL router.
If there is NAT (masquerading), you will not be able to get any information about specific client IP address.
Proxy is good solution for visited web-pages monitoring, however to monitor addresses you may use Traffic-Flow or firewall rules to get information about packets on MikroTik router.