Thanks for your answer, i think the same thing...
How did you resolve it?
I need to log only the web traffic, but i want to be sure which is the user on the other side, so, the simple IP is not sufficent.
For this reason i setted up a squid with radius authentication, which on it's log write:
- user1, web sites, time, ecc...
How could i solve this?
I could setup an hotspot, but i don't want to block all the traffic of my user, ONLY log visited web sites (by country local regulations).
I setted up a rule as (to try to bypass the MT proxy and to mantein only the squid proxy):
;;; Proxy Redirect
chain=dstnat action=dst-nat to-addresses=192.168.0.89 to-ports=3128
src-address=192.168.0.0/24 dst-port=80 protocol=tcp
but it doesn't work.
(192.168.0.89 is the squid proxy)