ENS help please !!!

[raulie3]

I would like to log other programs activity than WWW.

In fact I would like to log activity of programs like Messenger, Emule, WinMX,.... I cannot see the way to do it. I have tried with TCP Mapped services but I can't get it, sure I'm doing something wrong.

WG6 (about 75 users) + ENS (no WGIC)

Can anyone help me?

Thanks

[genie]

You will see TCP/UDP NAT connections originated from the client and the traffic information for these connections will be logged in the history database just like any other connection. Can your client machines connect through Wingate using NAT only?

[raulie3]

When I installed WG with ENS, in the DHCP server I changed the default gateway from the router (10.0.2.5) to the server (10.0.2.1). That was the only thing I did in my client machines.

With this configuration all the apps work fine in the clien machines, MSN Messenger, Emule, Radio apps, Updates, .... WWW, mail, ....

But logs don't work. If I start MSN Messenger or Emule I don't see any activity in my logs. The log for WWW or POP3 is OK. But for other services the traffic goes across Wingate, but no report shows it.

[genie]

Aha - make sure that DHCP server used was the one you re-configured - do you rely on WG DHCP server or on your other server? Because they might interfere with each other and the default route would be set to the old router. On the client machine simply type ipconfig /all to see the current setup.

[raulie3]

We rely on Windows 2000 DHCP Server. Wingate DHCP is disabled.

Ip of clients are 10.0.2.X
Mask 255.255.255.0
Gateway 10.0.2.1 ( The same IP than server IP. Router IP is 10.0.2.5 )

[genie]

Ok - is the gateway (10.0.2.5) directly accessible from the clients (behind the same switch/hub)? In that case the redirection might occur.

[raulie3]

Thank you Genie. I can't test it now because I can't stop all the office work, I'll try your suggestion later, at my office.

But how are the lines it's supposed to be at Logs\Wingate NAT\Wingate NAT.log ?

Now I have just "Service Started" and "Service stopped".

Well, I mean when it works will can we make a report like

USER IP - PORT - TRAFFIC
ie 10.0.2.17 - port 3389 (Terminal server) - 845 Kb

It's all we need.

[genie]

The log file will have an entry like this:

10/29/04 08:53:34 10.0.2.17 Guest 0000000116 Requested: NAT: UDP 10.0.2.17:1427 <-> <terminal server IP>:139