Transparent web proxy

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 20:14, 29 March 2006 (edit)
1143663485 (Talk | contribs)

← Previous diff
Revision as of 09:38, 30 March 2006 (edit) (undo)
WikiSysop (Talk | contribs)
m (Wiederhergestellt zur letzten Änderung von WikiSysop)
Next diff →
Line 57: Line 57:
# nvram get rc_firewall # nvram get rc_firewall
'''You are here: ''' '''[[Main Page]]'''/'''[[DD-WRT Docu (EN)]]'''/'''[[Squid Transparent Proxy]]''' '''You are here: ''' '''[[Main Page]]'''/'''[[DD-WRT Docu (EN)]]'''/'''[[Squid Transparent Proxy]]'''
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
-<div style="display:none"> 
-[We are delicate. We do not delete your content.] 
-[l_sp77] 
- 
-[http://kharkovcity.blogs.eurosport.com/ ephedrine hcl] 
-[http://my.opera.com/sedu-hair/homes/blog/sedu-hair-straightener.html sedu hair straightener]  
-[http://my.opera.com/my-dianabol/homes/blog/russian-dianabol.html russian dinanbol] 
-[http://www.buddy4u.com/view/?u=hydrocodone-apap hydrocodone apap] 
-[http://www.buddy4u.com/view/?u=order-ativan order ativan] 
-[http://www.buddy4u.com/view/?u=ativan-lorazepam ativan lorazepam] 
-[http://www.buddy4u.com/view/?u=purchase-ativan purchase ativan] 
-[http://www.buddy4u.com/view/?u=buy-ativan-online buy ativan online] 
-[http://www.buddy4u.com/view/?u=tramadol-180 tramadol 180] 
-[http://members.fotki.com/verizon-ringtone verizon ringtone] 
-[http://members.fotki.com/sprint-ringtone sprint ringtone] 
-[http://mysite.com.ua/xdem8171/pagesxdem8171/1_1.html 2mg xanax order] 
-[http://www.buddy4u.com/view/?u=motorola-ringtones-free motorola ringtones free] 
-[http://www.buddy4u.com/view/?u=free-nokia-ringtone free nokia ringtone] 
-[http://www.buddy4u.com/view/?u=download-free-ringtone download free ringtone] 
-[http://www.buddy4u.com/view/?u=free-mp3-ringtone free mp3 ringtone] 
-[http://www.buddy4u.com/view/?u=free-cingular-ringtones free cingular ringtones] 
-[http://www.buddy4u.com/view/?u=us-cellular-ringtones us cellular ringtones] 
-[http://www.buddy4u.com/view/?u=sprint-ringtone sprint ringtone] 
-[http://www.buddy4u.com/view/?u=sleeper-sofa sleeper sofa] 
-[http://www.buddy4u.com/view/?u=amsouth-bank amsouth bank] 
-[http://www.buddy4u.com/view/?u=personalized-christian-gift personalized christian gift] 
-[http://www.buddy4u.com/view/?u=wall-murals wall murals] 
-[http://www.buddy4u.com/view/?u=gas-scooter gas scooter] 
-[http://www.buddy4u.com/view/?u=platform-bed platform bed] 
-[http://www.buddy4u.com/view/?u=toddler-bedding toddler bedding] 
-[http://www.buddy4u.com/view/?u=prepaid-credit-cards prepaid credit cards] 
-[http://www.buddy4u.com/view/?u=neck-pillow neck pillow] 
-[http://www.buddy4u.com/view/?u=toddler-bed toddler bed] 
-[http://ditech-mortgage.altavista.in.ua/index.html ditech mortgage] 
-[http://ditech-mortgage.altavista.in.ua/ditech-mortgage-company.html ditech mortgage company] 
-[http://ditech-mortgage.altavista.in.ua/ditech-mortgage.html ditech mortgage] 
-[http://ditech-mortgage.altavista.in.ua/ditech-mortgage-loan.html ditech mortgage loan] 
-[http://ditech-mortgage.altavista.in.ua/ditech-from-home-loan-mortgage-second.html ditech from home loan mortgage second] 
-[http://www.buddy4u.com/view/?u=rivotril rivotril] 
-[http://www.buddy4u.com/view/?u=buy-valium buy valium] 
-[http://www.buddy4u.com/view/?u=phentermine-37-5mg phentermine 37 5mg] 
-[http://www.buddy4u.com/view/?u=phentermine-no-prescription phentermine no prescription] 
-[http://www.buddy4u.com/view/?u=buy-ultram buy ultram] 
-[http://www.buddy4u.com/view/?u=ambien-cr ambien cr] 
-[http://www.buddy4u.com/view/?u=cheap-fioricet cheap fioricet] 
-[http://www.buddy4u.com/view/?u=buy-bontril bontril] 
-[http://www.buddy4u.com/view/?u=bontril-sr bontril sr] 
-[http://www.buddy4u.com/view/?u=buy-propecia buy propecia] 
-[http://www.buddy4u.com/view/?u=order-propecia order propecia] 
-[http://www.buddy4u.com/view/?u=didrex-online didrex online] 
-[http://www.buddy4u.com/view/?u=generic-levitra generic levitra] 
-[http://www.buddy4u.com/view/?u=paxil-cr paxil cr] 
-[http://www.buddy4u.com/view/?u=buy-butalbital butalbital] 
-[http://www.buddy4u.com/view/?u=adipex-p adipex p] 
-[http://www.buddy4u.com/view/?u=cheap-xenical cheap xenical] 
-[http://www.buddy4u.com/view/?u=buy-clonazepam clonazepam] 
-[http://www.buddy4u.com/view/?u=wellbutrin-xl wellbutrin xl] 
-[http://www.buddy4u.com/view/?u=phendimetrazine phendimetrazine] 
-[http://www.buddy4u.com/view/?u=diethylpropion- diethylpropion] 
-[http://www.buddy4u.com/view/?u=zoloft-side-effects zoloft side effects] 
-[http://www.buddy4u.com/view/?u=klonopin klonopin] 
-[http://www.buddy4u.com/view/?u=flexeril flexeril] 
-[http://www.buddy4u.com/view/?u=buy-codeine codeine] 
-[http://www.buddy4u.com/view/?u=acyclovir- acyclovir] 
-[http://www.buddy4u.com/view/?u=buy-diflucan diflucan] 
-[http://www.buddy4u.com/view/?u=buy-nexium nexium] 
-[http://www.buddy4u.com/view/?u=bextra-vioxx bextra] 
-[http://www.buddy4u.com/view/?u=fastin fastin] 
-[http://www.buddy4u.com/view/?u=prilosec-otc prilosec otc] 
-[http://ditech-mortgage.altavista.in.ua/ditech-mortgages.html ditech mortgages] 
-[http://ditech-mortgage.altavista.in.ua/company-ditech-mortgage.html company ditech mortgage] 
-[http://ditech-mortgage.altavista.in.ua/ditech-mortgage-interest-rates.html ditech mortgage interest rates] 
-[http://ditech-mortgage.altavista.in.ua/mortgage-calculator-and-ditech.html mortgage calculator and ditech] 
-[http://ditech-mortgage.altavista.in.ua/ditech-loan-mortgage.html ditech loan mortgage] 
-[http://ditech-mortgage.altavista.in.ua/ditech-mortgage-calculator.html ditech mortgage calculator] 
-[http://ditech-mortgage.altavista.in.ua/ditech-mortgage-company.html ditech mortgage company] 
-[http://ditech-mortgage.altavista.in.ua/ditech-home-mortgage.html ditech home mortgage] 
-[http://ditech-mortgage.altavista.in.ua/ditech-mortgage-rate.html ditech mortgage rate] 
-[http://tamiflu.algohio.com buy tamiflu] 
-[http://herring.cc.gatech.edu/ActiveLiving buy tenuate] 
-[http://herring.cc.gatech.edu/ActiveSeniors Sports Wagering] 
-[http://herring.cc.gatech.edu/Arch4303 payday loan application] 
-</div> 

Revision as of 09:38, 30 March 2006

You are here: Main Page/DD-WRT Docu (EN)/Squid Transparent Proxy


Introduction

Running a transparent proxy server on your network can be used for more advanced content filtering of web pages for environments such as a school or library (where in some locales, filtering is required by law) or as a way to protect children in the household.

This guide will help you enable a transparent proxy server on your network by having your WRT54G router forward all traffic to the proxy server automatically

Desktop Setup

First install Squid on your unix box after that you have to set up squid to do transparent proxying with these settings

httpd_accel_host virtual
httpd_accel_port 80

httpd_accel_with_proxy on

httpd_accel_uses_host_header on

Router Setup

You will need to use iptables to tell your router how to forward traffic. If you don't have a good grasp on iptables yet, someone has already done the work and written a shellscript to do the work for you. Be sure to edit the variables at the top.

The script can be found at: http://forum.bsr-clan.de/viewtopic.php?p=10177#10177

#!/bin/sh
INTERNAL_NETWORK="192.168.0.0/24"
ROUTER_IP="192.168.0.1"
PROXY_SERVER="192.168.0.10"
PROXY_PORT="3128"
if [ -z $TRANSPARENT_PROXY ]; then
  /usr/sbin/iptables -t nat -A PREROUTING -i br0 -s $INTERNAL_NETWORK \
    -d $INTERNAL_NETWORK -p tcp --dport 80 -j ACCEPT
  /usr/sbin/iptables -t nat -A PREROUTING -i br0 -s ! $PROXY_SERVER -p tcp --dport 80 \
    -j DNAT --to $PROXY_SERVER:$PROXY_PORT
  /usr/sbin/iptables -t nat -A POSTROUTING -o br0 -s $INTERNAL_NETWORK -p tcp -d \
    $PROXY_SERVER -j SNAT --to $ROUTER_IP
  /usr/sbin/iptables -t filter -I FORWARD -s $INTERNAL_NETWORK -d $PROXY_SERVER -i br0 \
    -o br0 -p tcp --dport $PROXY_PORT -j ACCEPT
  export TRANSPARENT_PROXY="1"
else
  echo "This script has already run!"
  echo "If it hasn't, unset \$TRANSPARENT_PROXY manually via the shell."
fi


You'll need to have the script run every time the router boots. An easy way to do is to set as in the rc_firewall variable. From either Telnet/SSH_and_the_Command_Line

# nvram set rc_firewall="
PASTE
EDITED 
SCRIPT
HERE
"

You can confirm that the changes were made by executing

  1. nvram get rc_firewall

You are here: Main Page/DD-WRT Docu (EN)/Squid Transparent Proxy