Re: Many web sites - log help - refering addy's in the log?
- From: "Jim Harrison" <jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 18 Feb 2002 12:24:04 -0800
If you want to keep using web publishing, you can't.
Your only other option is to:
1. remove one IP from the incoming web requests listeners
2. use that IP in a server publishing rule
Unfortunately, this also drops all the kewl features of web publishing.
One of our number is hard at it, trying to create a web filter that will
provide the real source IP of the client, but that is not yet available.
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/authors/harrison/
Read the books!
----- Original Message -----
From: "Tim" <tmg@xxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Monday, February 18, 2002 10:40
Subject: [isalist] Re: Many web sites - log help - refering addy's in the
log?
http://www.ISAserver.org
here is a copy of the log:
#Fields: date time c-ip cs-username s-sitename s-computername s-ip s-port
cs-method cs-uri-stem cs-uri-query sc-status sc-win32-status sc-bytes
cs-bytes time-taken cs-version cs-host cs(User-Agent) cs(Cookie)
cs(Referer)
2002-01-26 18:05:16 100.180.180.180 - W3SVC2 WEBSERV 100.180.180.202 80
GET /Contact/contactus.htm - 200 0 27902 313 203 HTTP/1.0 www.orsite.com
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+98) -
http://www.google.com/search?q=%22contact+us%22&hl=en
as you can see the reffering url is from google but the reffering IP is
OUR ISA server (100.180.180.180)
How can i change the logging of these site so it shows the reffering IP of
the user?
Thanks
Tim
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
