Prophecy Posted June 19, 2015 Share Posted June 19, 2015 Anyone have any suggestions for a SMB software product not really an appliance that would allow me to do some URL tracking on some machines? Im looking to avoid an appliance, I cant swap out my router because of Im currently using some SSL tunnels via our routing device. It can be local on the workstation and hidden or it can be installed on a server. Really need something with a small foot print. I thought about running a proxy box with Tangle or something of that sort, however not really wanting to spend alot on this since its for SMB application. Also trying not to rally interfere with the products on the box that require Internet access. Thanks in advance Link to comment Share on other sites More sharing options...
+John Teacake MVC Posted June 19, 2015 MVC Share Posted June 19, 2015 Theres a few linux based solutions, I beleive pfSense has a plugin, I think it was called Dans Guardian or something like that, Is it still around? Not sure. Google it. Also Smoothwall did a free one a while back a UTM bo, You could download it as a Virtual Appliance. Not sure if it exists now. Also Untangle perhaps? Just noticed you wrote about that. Whats wrong with using that? Depicus 1 Share Link to comment Share on other sites More sharing options...
Depicus Posted June 19, 2015 Share Posted June 19, 2015 Seconded pfSense which you can install Squid and SquidGuard to block and LightSquid (not used yet) or Sarg for reporting. I run a couple, one on a very old server (2002) and others on VMWare and they work just fine. Got a version running on VMWare with 200+ users and runs just fine. Link to comment Share on other sites More sharing options...
Prophecy Posted June 19, 2015 Author Share Posted June 19, 2015 Just trying to figure out how to use this inconjuction with the router and Ad infrastructure. I guess the only way is a Proxy box, Then point the workstations to the proxy . Link to comment Share on other sites More sharing options...
TPreston Posted June 19, 2015 Share Posted June 19, 2015 Just trying to figure out how to use this inconjuction with the router and Ad infrastructure. I guess the only way is a Proxy box, Then point the workstations to the proxy . Yes it needs to be a proxy you have to have two NIC's aswell on the server. You connect one to your switch and the other to your router, Everything has to go through the proxy to get internet access the internal IP of the server becomes the default gateway for all clients. Link to comment Share on other sites More sharing options...
+BudMan MVC Posted June 19, 2015 MVC Share Posted June 19, 2015 do you just want to track the urls used or do you want to filter/block these urls. And you want to track which USER via AD creds that go to these urls.. Or would just tracking the urls used and the IPs be good enough? There are ways to track urls without using a proxy.. Something like urlsnarf in conjunction with say ettercap could work. Another possible option is just logging dns requests if your wanting to see where people are going. If explain exactly what your trying to accomplish we can go over the options in skinning the specific cat. Link to comment Share on other sites More sharing options...
Recommended Posts