Who's going where?

[njcajun]

I have a Linux box set up as a firewall/gateway using ipchains. A lot of stuff is going to my /var/log/messages file about both input AND output being either rejected or denied, which is ok - except that I have 5 boxes behind this gateway and can't tell which boxes are producing the log entries!

Is there a way to determine this?

TIA.

[Craig McPherson]

Each of those log messages should include both the source and destination IP address. You may get MAC addresses also. I don't see a problem.

[njcajun]

ummm...

The logs DO contain the source and destination ip's. The problem you don't see is that the ip on my end is always going to show up as the external interface of my gateway - not the internal private ip.