RE: Logging NAT Translations

["Masembwa, Solomon" <solomon.masembwa () eds com>]

You should append "log" to the end of your NAT ACL and configure your router
to send the logs to a syslog server. The router will cache but so much and
them overwrite once the cache become full.

-----Original Message-----
From: Paul Stewart [mailto:pauls () nexicom net]
Sent: Monday, February 10, 2003 1:09 PM
To: Masembwa, Solomon; security-basics () securityfocus com
Subject: RE: Logging NAT Translations


We have a client that has requested this feature but never been able to
find a way of doing it via the router... Anyone know of a way of doing
this?

They want to monitor everything that their employees is doing and this
seemed like the most economical way if possible...

---
Paul Stewart
Network Solutions Specialist
Nexicom Inc.


-----Original Message-----
From: Masembwa, Solomon [mailto:solomon.masembwa () eds com] 
Sent: Friday, February 07, 2003 9:59 PM
To: security-basics () securityfocus com
Subject: Logging NAT Translations


Can Anyone tell me if any ISP, large medium or Small, logs their NAT
translations?