mega_stream

Here's one for the techies out there...

I need to be able to view source IP addresses for incoming connections to a web server, I've looked in winntsystem32logfiles which has logged all connections but shows only our default gateway address..

Can anyone suggest anything I can use to view the actual source address? ( I can see them on the firewall but thats no use, I need it to be accessed from outside )

John

mega_stream

I heard 80% of Subaru owners worked in I.T

LanCat

I'm assuming your firewall is of the proxy type and your website is on the internal "secure" side rather than the external "dirty" side. Basically this means the firewall is handshaking the requests between the users and the website. You'll only ever get the firewall address logged by IIS in this case. I had the same issue when I kept our webserver in a dmz. I ended up moving it out and spending time almost every day making sure I was up to date with security fixes. The best you may be able to do is to use the firewall logs.

mega_stream

My thoughts confirmed then....

Thanks