>> "The company" wants to monitor internet access via the firewall. Where
>> are the logs located that record that? Or do I have to invoke an app to
>> make that happen? RedHat 7.1 2.4.10
> Well, first you have to log the packets outbound. Frankly I think
> monitoring internet access would be easier by setting up a squid proxy
> and firewalling outbound so that clients had to use it. The squid logs
> can be read with 'calamaris' and e-mailed to you.
That would end up blocking ssh, outside pop3 access, etc. unless those
ports were opened. It also makes larger media files, like video, not work
very well. But then our internet access is throttled by a 56K frame relay
connection to our factory 3000 miles away.
David Efflandt - All spam ignored http://www.de-srv.com/