IMSpector on zentyal ?

[ZentyalFan]

Hi,
 I am a newbie to zentyal, which is set as Internet gateway.

 I am trying to configure  imspector with squid proxy.

 So far, I could compile imspector and install. As per help on site, I added following 2 rules to /etc/ebox/hooks/firewall.postservice


sudo iptables -t nat -A PREROUTING -p tcp --destination-port 1863 -j REDIRECT --to-ports 16667
sudo iptables -t nat -A OUTPUT -p tcp --destination-port 1863 -m owner --uid-owner 13 -j REDIRECT --to-ports 16667

[13 is usid for proxy, i assume squid is running under this userid]

No errors. But no logging.

After restarting firewall, iptables -L -n does not show the above rule.

I don't see anything in imspector log. Not even in debug mode.

root@itrix:/home/proxuser# sudo imspector -d
imspector: Protocol Plugin name: Gadu-Gadu IMSpector protocol plugin
imspector: Protocol Plugin name: HTTPS IMSpector protocol plugin
imspector: Protocol Plugin name: ICQ-AIM IMSpector protocol plugin
imspector: Protocol Plugin name: IRC IMSpector protocol plugin
imspector: Protocol Plugin name: Jabber IMSpector protocol plugin
imspector: Protocol Plugin name: MSN IMSpector protocol plugin
imspector: Protocol Plugin name: Yahoo IMSpector protocol plugin
imspector: Non-HTTP port listening on 0.0.0.0:16667
imspector: Logging Plugin name: Debug IMSpector logging plugin
imspector: Logging Plugin name: File IMSpector logging plugin


Can anybody spot what I am doing wrong or what is the correct way to do it ?

[ftahir]

It wont work like that.
.


.
Use following rules, then it will work perfectly..


iptables -t nat -I PREROUTING 1 -p tcp --destination-port 1863 -j REDIRECT --to-ports 16667
iptables -t nat -I PREROUTING 1 -p tcp --destination-port 5222 -j REDIRECT --to-ports 16667
iptables -t nat -I PREROUTING 1 -p tcp --destination-port 5190 -j REDIRECT --to-ports 16667
iptables -t nat -I PREROUTING 1 -p tcp --destination-port 5050 -j REDIRECT --to-ports 16667
iptables -t nat -I PREROUTING 1 -p tcp --destination-port 6667 -j REDIRECT --to-ports 16667
iptables -t nat -I PREROUTING 1 -p tcp --destination-port 8074 -j REDIRECT --to-ports 16667

Actually you have to add the rules at TOP of the chain of prerouting...
normally, when you add rules,,all rules are added after the rules, already present.
try this one, it works for me.

[ZentyalFan]

Hi

I had been away. Thanks for your reply. I replaced my rules with yours in firewall.postservice
But can't see result in impsector.cgi.

I have to replace rules in same file, right ?

Also, as per imspector docs, if I have enabled squid caching proxy I need to add second rule too. Is my 2nd rule correct or there is modification for it ?

[domedfd]

I know how to access http?