Administration Features Accessible Via WWW Browsers

The Remote Admin Setup Screen allows you to specify a port for the `webadmin' service. This pseudo-proxy allows you to access the HTML version of this manual, browse the system log, and generate log activity and traffic graphs and reports, all from a standard web browser client. To make this facility accessible, specify a non-zero value for the webadmin port, and then configure one or more TCP proxies for this service.

To access these facilities, use a web browser to go to the URL

http://hostname:port/

where hostname is the firewall's hostname, and port is the port that you specified for the webadmin service on the Remote Admin Setup screen (see section 4.14). Use https instead of http if webadmin is configured to use SSL.

The use of these facilities is self-explanatory. Try it out and see! Some of the reports and commands available are:

• Browsing the system log.
• Viewing the on-line manual.
• Browsing RFCs (Request for Comments); this requires that the RFCs be installed on the firewall. See below for a description of how to use this feature.
• Checking the running processes, available disk space, network statistics, etc.
• Flushing the mail queue, and displaying what mail is still in the queue after the flush.
• Checking the route to a host. This feature allows you to remotely run a traceroute command on the firewall itself and view the results. Note that if the transparent gateway is configured to log dropped ICMP packets, you will see the ICMP messages that are used for the route tracing being logged as dropped ICMP packets; you can safely ignore these messages in the system log.
• Generating and viewing user activity reports, in various amounts of detail, for various users, services, and periods of time.
• Client-server activity reports.
• FTP file transfer reports and NNTP newsgroup useage reports;
• Mail message summary reports, summaries of spam mail rejection, and details of undeliverable mail messages.
• Login, su, and reboot activity reports.
• Service denial reports.
• Traffic level, rate, and bandwidth utilisation plots.