[prev in list] [next in list] [prev in thread] [next in thread] 

List:       opnsense-users
Subject:    Re: Where to look URL without proxy?
From:       Franco Fichtner <franco () opnsense ! org>
Date:       2017-05-26 6:21:33
Message-ID: 82346970-A482-48BB-BAE8-52B16FDE70FB () opnsense ! org
[Download RAW message or body]

Hi José,

Marcos is right, you need some type of aware process to extract this.

Some systems sniff this by using PCAP listeners and then extract HTTP
requests, but that only works with HTTP, not HTTPS, where you could
only read the SSL certificate hostname if given, not the full URL.

Reading PCAP-traffic wouldn't slow down the traffic much, but I'm not
aware of a portable solution.  It may exist, but we don't have such
integrated in OPNsense.

Squid + HTTPS option is the only solution if you always need the full URL.


Cheers,
Franco

> On 23. May 2017, at 6:29 AM, José Gregorio Díaz Unda <jgdiazunda@asyste.cl> \
> wrote: 
> Dear OPNsense crew,
> 
> I have installed OPNsense 17.1 with no proxy; firewall, resolver and DHCP working \
> perfectly. 
> I'm trying to find where can a look URLs accessed from my LAN to INTERNET.
> 
> My plan is to see some traffic before start blocking certain services.
> 
> I've been surfing the web interface, buy only find IP addresses. Even some logs via \
> shell, but nothing like a URL. 
> Thanks in advance.
> 
> José G.
> 
> 
> 
> _______________________________________________
> users mailing list
> users@lists.opnsense.org
> http://lists.opnsense.org/listinfo/users

_______________________________________________
users mailing list
users@lists.opnsense.org
http://lists.opnsense.org/listinfo/users


[prev in list] [next in list] [prev in thread] [next in thread]