how do I see incoming IPs to a web server?

schpoink · External Since: Apr 24, 2006 Posts: 3

Could someone point me in the right direction to figure out how to check the
incoming IP addresses of people who are viewing my photos on a PC based
server (Qurio.com) that's located on my Green network behind Smoothwall 2.0?

None of the out-of-box logs seem to show this, though my old linksys router
showed this stuff in its log.

Thanks for any help. I've search on various forums and can't find the way
to go. Is there a mod I need to install?

I have all SW patches up to date and the excellent Full-Firewall-Control mod
installed.

niels leeuwis · External Since: Jul 27, 2005 Posts: 2

schpoink wrote:
> Could someone point me in the right direction to figure out how to check the
> incoming IP addresses of people who are viewing my photos on a PC based
> server (Qurio.com) that's located on my Green network behind Smoothwall 2.0?

first: Your smoothwall does not have this feature, but if you have a
webserver running you should get that information from the loggings of
that webserver.

second: You should set up an orange network for your webserver, in your
current configuration your whole network is exposed if the server is
corrupted (read hacked or cracked)

regards

Niels

schpoink · External Since: Apr 24, 2006 Posts: 3

Actually it is a photo server (via a mirror service "qurio.com") and I think
I just learned that all communication is handled though outbound (my PC to
the mirror) port traffic. There are no logs available through this free
service -- that'd be why I wanted to see the traffic.

You're right about hosting a typical web server on an Orange network.

Meantime, I see that I can see the traffic using the "TCPDUMP -i any host
myservingpcipaddress" command as root on the Smoothwall.

Anyone know a better way?

"niels leeuwis" <niels.DeleteThis@home.nl> wrote in message
news:444d4745$0$2024$ba620dc5@text.nova.planet.nl...
> schpoink wrote:
>> Could someone point me in the right direction to figure out how to check
>> the
>> incoming IP addresses of people who are viewing my photos on a PC based
>> server (Qurio.com) that's located on my Green network behind Smoothwall
>> 2.0?
>
> first: Your smoothwall does not have this feature, but if you have a
> webserver running you should get that information from the loggings of
> that webserver.
>
> second: You should set up an orange network for your webserver, in your
> current configuration your whole network is exposed if the server is
> corrupted (read hacked or cracked)
>
> regards
>
> Niels
>

Aidan Karley · External Since: Jun 10, 2005 Posts: 2

In article <444d4745$0$2024$ba620dc5@text.nova.planet.nl>, Niels leeuwis
wrote:
> first: Your smoothwall does not have this feature, but if you have a
> webserver running you should get that information from the loggings of
> that webserver.
>
That's what I thought too. Logic being that you'd *told* Smoothie
that incoming traffic on port 80 (+8080?) was OK, so why should Smoothie
watch it?

--
Aidan Karley, FGS
Aberdeen, Scotland,
Location: +57d10' , -02d09' (sub-tropical Aberdeen), 0.021233
Written at Tue, 25 Apr 2006 08:17 +0100