From mboxrd@z Thu Jan 1 00:00:00 1970 From: Romain Moyne Subject: Re: [despammed] port translation Date: Sun, 11 Jan 2004 12:03:57 +0100 Sender: netfilter-admin@lists.netfilter.org Message-ID: <40012D9D.3000201@yahoo.fr> References: <4001239D.7010904@yahoo.fr> <20040111104602.GA2551@kaufbach.delug.de> Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Return-path: In-Reply-To: <20040111104602.GA2551@kaufbach.delug.de> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="iso-8859-1"; format="flowed" To: Andreas Kretschmer Cc: netfilter@lists.netfilter.org Andreas Kretschmer a =E9crit : >am Sun, dem 11.01.2004, um 11:21:17 +0100 mailte Romain Moyne folgendes: > =20 > >>Hello, >> >>I'm French and my english is bad ;) >> =20 >> > >I'm German and my english is bad, too ;-) > > =20 > >>I have a http server (debian 3.0) behind a router (debian 3.0). I have a = >>problem when I want to log the visitor's IP of my website with PHP or=20 >>Perl or all language. I have always the IP of my router ! Somebody tell=20 >>me that I must do port translation but I have searched and I haven't=20 >>fand anything. >>Can you help me ? >>This is the rules of my router : >> >>iptables -t nat -A PREROUTING -d MyIP -p tcp --dport 80 -j DNAT=20 >>--to-destination 192.168.0.3:80 >> =20 >> > >With this rule you make a 'DNAT', the WebServer can only see the >Source-IP from your router. > >You can install a WebServer or an Proxy for your Webserver on the >router, than you can see the visitor's IP and you can log this. > >A other way is to analyse the logged packets on the router. > > >Andreas > =20 > There isn't another possibility ? I must install a proxy ? (a proxy with=20 a pentium 133Mhz will run bad ?)