Wfquery

From Wiki of WFilter NG Firewall
(Difference between revisions)
Jump to: navigation, search
(System)
 
(One intermediate revision by one user not shown)
Line 73: Line 73:
 
* Only QQ messenger IDs can be recorded.
 
* Only QQ messenger IDs can be recorded.
 
* When "FTP/Telnet Sessions" is enabled, sent FTP/Telnet commands can be recorded.
 
* When "FTP/Telnet Sessions" is enabled, sent FTP/Telnet commands can be recorded.
 +
* IP-MAC History: daily IP-MAC address history.
 +
* Connections: detail of TCP connections history.
  
 
== Advanced Settings ==
 
== Advanced Settings ==
  
 
=== System ===
 
=== System ===
* '''Enable Debug''': write debug logs for diagnose.
+
* '''IPv6''': enable recording of IPv6 activities.
 
* '''Database Commit''': the database commit frequency.
 
* '''Database Commit''': the database commit frequency.
 
* '''Additional Webmail Domains''': Custom webmails to be recorded.
 
* '''Additional Webmail Domains''': Custom webmails to be recorded.
 +
* '''Protocol Ports''', customize protocols ports for HTTP, HTTPS, POP3, IMAP4 and SMTP.
  
 
[[File:Wfrecorder_advanced_en2.png]]
 
[[File:Wfrecorder_advanced_en2.png]]

Latest revision as of 15:46, 8 May 2023

Contents

[edit] 1 Internet Usage Monitoring

The "Internet Usage Monitoring" module records internet activities, including:

  • Web Surf
  • Web Post
  • Outgoing Emails
  • Incoming Emails
  • File Upload History
  • File Download History
  • IM Accounts
  • FTP/Telnet Sessions
  • IP-MAC History
  • Connection Details

This module works both in "gateway mode" and "bridge mode". Enterprise license is required.

Wfrecorder query1.png

Wfrecorder query2.png

Wfrecorder query3.png

Wfrecorder queryftp.png

Wfrecorder queryim.png

Wfrecorder querysessions.png

Wfrecorder querysessions.png

Wfrecorder queryconnections.png

[edit] 2 Recording Policy

For every client, multiple policies can be applied. For example:

  • A policy: record web surfing for a whole subnet.
  • B policy: enable "email recording" for a special IP in this subnet.

For this ip, both "web surfing recording" and "email recording" will be enabled.

Detailed "recording policy" settings are described in below.

[edit] 2.1 Web Recording

  • Web Surf: record titles of visited web pages for http websites. For https websites, only domains will be recorded in default. To record https webpages, please check "SSL Inspector".
  • Web Post: record web post content for http websites. To record https websites posts, please check "SSL Inspector".
  • Web Post Size Limit: no recording of web post exceeds size limit.
  • Smart Filter: With this feature enabled, WFilter will not record visits by non-human. (Not 100% accurate)
  • Domains Exception: no recording of domains in the exception list. Wildcards "*?" are supported.

Wfrecorder setweb en2.png

[edit] 2.2 Email Recording

Wfrecorder sermail en.jpg

  • Emails supported: SMTP, POP3, IMAP4 and outgoing web-based emails.
  • For emails exceed size limit, only subject/from/to will be recorded.
  • To record ssl emails(SMTP/POP/IMAP over SSL), please check "SSL Inspector".

[edit] 2.3 File Transfers

Wfrecorder settings ftp.png

  • File transfers supported: FTP upload, FTP download, Web download, Web upload.
  • WFilter only records filenames/URLs of downloaded files. While full file content can be recorded for uploading files.
  • For uploading files exceed size limit, only filenames can be recorded.
  • To record files via https, you need to enable "HTTPS Inspector".

[edit] 2.4 Others

Wfrecorder settings other.png

Options to enable IM acounts and FTP/Telnet sessions.

  • Only QQ messenger IDs can be recorded.
  • When "FTP/Telnet Sessions" is enabled, sent FTP/Telnet commands can be recorded.
  • IP-MAC History: daily IP-MAC address history.
  • Connections: detail of TCP connections history.

[edit] 3 Advanced Settings

[edit] 3.1 System

  • IPv6: enable recording of IPv6 activities.
  • Database Commit: the database commit frequency.
  • Additional Webmail Domains: Custom webmails to be recorded.
  • Protocol Ports, customize protocols ports for HTTP, HTTPS, POP3, IMAP4 and SMTP.

Wfrecorder advanced en2.png

Personal tools
Namespaces

Variants
Actions
Navigation
Tools