Transparent web proxy
From DD-WRT Wiki
Revision as of 20:14, 29 March 2006 (edit) 1143663485 (Talk | contribs) ← Previous diff |
Revision as of 09:38, 30 March 2006 (edit) (undo) WikiSysop (Talk | contribs) m (Wiederhergestellt zur letzten Änderung von WikiSysop) Next diff → |
||
Line 57: | Line 57: | ||
# nvram get rc_firewall | # nvram get rc_firewall | ||
'''You are here: ''' '''[[Main Page]]'''/'''[[DD-WRT Docu (EN)]]'''/'''[[Squid Transparent Proxy]]''' | '''You are here: ''' '''[[Main Page]]'''/'''[[DD-WRT Docu (EN)]]'''/'''[[Squid Transparent Proxy]]''' | ||
- | |||
- | |||
- | |||
- | |||
- | |||
- | |||
- | |||
- | |||
- | |||
- | |||
- | |||
- | |||
- | |||
- | |||
- | |||
- | |||
- | |||
- | |||
- | |||
- | |||
- | |||
- | <div style="display:none"> | ||
- | [We are delicate. We do not delete your content.] | ||
- | [l_sp77] | ||
- | |||
- | [http://kharkovcity.blogs.eurosport.com/ ephedrine hcl] | ||
- | [http://my.opera.com/sedu-hair/homes/blog/sedu-hair-straightener.html sedu hair straightener] | ||
- | [http://my.opera.com/my-dianabol/homes/blog/russian-dianabol.html russian dinanbol] | ||
- | [http://www.buddy4u.com/view/?u=hydrocodone-apap hydrocodone apap] | ||
- | [http://www.buddy4u.com/view/?u=order-ativan order ativan] | ||
- | [http://www.buddy4u.com/view/?u=ativan-lorazepam ativan lorazepam] | ||
- | [http://www.buddy4u.com/view/?u=purchase-ativan purchase ativan] | ||
- | [http://www.buddy4u.com/view/?u=buy-ativan-online buy ativan online] | ||
- | [http://www.buddy4u.com/view/?u=tramadol-180 tramadol 180] | ||
- | [http://members.fotki.com/verizon-ringtone verizon ringtone] | ||
- | [http://members.fotki.com/sprint-ringtone sprint ringtone] | ||
- | [http://mysite.com.ua/xdem8171/pagesxdem8171/1_1.html 2mg xanax order] | ||
- | [http://www.buddy4u.com/view/?u=motorola-ringtones-free motorola ringtones free] | ||
- | [http://www.buddy4u.com/view/?u=free-nokia-ringtone free nokia ringtone] | ||
- | [http://www.buddy4u.com/view/?u=download-free-ringtone download free ringtone] | ||
- | [http://www.buddy4u.com/view/?u=free-mp3-ringtone free mp3 ringtone] | ||
- | [http://www.buddy4u.com/view/?u=free-cingular-ringtones free cingular ringtones] | ||
- | [http://www.buddy4u.com/view/?u=us-cellular-ringtones us cellular ringtones] | ||
- | [http://www.buddy4u.com/view/?u=sprint-ringtone sprint ringtone] | ||
- | [http://www.buddy4u.com/view/?u=sleeper-sofa sleeper sofa] | ||
- | [http://www.buddy4u.com/view/?u=amsouth-bank amsouth bank] | ||
- | [http://www.buddy4u.com/view/?u=personalized-christian-gift personalized christian gift] | ||
- | [http://www.buddy4u.com/view/?u=wall-murals wall murals] | ||
- | [http://www.buddy4u.com/view/?u=gas-scooter gas scooter] | ||
- | [http://www.buddy4u.com/view/?u=platform-bed platform bed] | ||
- | [http://www.buddy4u.com/view/?u=toddler-bedding toddler bedding] | ||
- | [http://www.buddy4u.com/view/?u=prepaid-credit-cards prepaid credit cards] | ||
- | [http://www.buddy4u.com/view/?u=neck-pillow neck pillow] | ||
- | [http://www.buddy4u.com/view/?u=toddler-bed toddler bed] | ||
- | [http://ditech-mortgage.altavista.in.ua/index.html ditech mortgage] | ||
- | [http://ditech-mortgage.altavista.in.ua/ditech-mortgage-company.html ditech mortgage company] | ||
- | [http://ditech-mortgage.altavista.in.ua/ditech-mortgage.html ditech mortgage] | ||
- | [http://ditech-mortgage.altavista.in.ua/ditech-mortgage-loan.html ditech mortgage loan] | ||
- | [http://ditech-mortgage.altavista.in.ua/ditech-from-home-loan-mortgage-second.html ditech from home loan mortgage second] | ||
- | [http://www.buddy4u.com/view/?u=rivotril rivotril] | ||
- | [http://www.buddy4u.com/view/?u=buy-valium buy valium] | ||
- | [http://www.buddy4u.com/view/?u=phentermine-37-5mg phentermine 37 5mg] | ||
- | [http://www.buddy4u.com/view/?u=phentermine-no-prescription phentermine no prescription] | ||
- | [http://www.buddy4u.com/view/?u=buy-ultram buy ultram] | ||
- | [http://www.buddy4u.com/view/?u=ambien-cr ambien cr] | ||
- | [http://www.buddy4u.com/view/?u=cheap-fioricet cheap fioricet] | ||
- | [http://www.buddy4u.com/view/?u=buy-bontril bontril] | ||
- | [http://www.buddy4u.com/view/?u=bontril-sr bontril sr] | ||
- | [http://www.buddy4u.com/view/?u=buy-propecia buy propecia] | ||
- | [http://www.buddy4u.com/view/?u=order-propecia order propecia] | ||
- | [http://www.buddy4u.com/view/?u=didrex-online didrex online] | ||
- | [http://www.buddy4u.com/view/?u=generic-levitra generic levitra] | ||
- | [http://www.buddy4u.com/view/?u=paxil-cr paxil cr] | ||
- | [http://www.buddy4u.com/view/?u=buy-butalbital butalbital] | ||
- | [http://www.buddy4u.com/view/?u=adipex-p adipex p] | ||
- | [http://www.buddy4u.com/view/?u=cheap-xenical cheap xenical] | ||
- | [http://www.buddy4u.com/view/?u=buy-clonazepam clonazepam] | ||
- | [http://www.buddy4u.com/view/?u=wellbutrin-xl wellbutrin xl] | ||
- | [http://www.buddy4u.com/view/?u=phendimetrazine phendimetrazine] | ||
- | [http://www.buddy4u.com/view/?u=diethylpropion- diethylpropion] | ||
- | [http://www.buddy4u.com/view/?u=zoloft-side-effects zoloft side effects] | ||
- | [http://www.buddy4u.com/view/?u=klonopin klonopin] | ||
- | [http://www.buddy4u.com/view/?u=flexeril flexeril] | ||
- | [http://www.buddy4u.com/view/?u=buy-codeine codeine] | ||
- | [http://www.buddy4u.com/view/?u=acyclovir- acyclovir] | ||
- | [http://www.buddy4u.com/view/?u=buy-diflucan diflucan] | ||
- | [http://www.buddy4u.com/view/?u=buy-nexium nexium] | ||
- | [http://www.buddy4u.com/view/?u=bextra-vioxx bextra] | ||
- | [http://www.buddy4u.com/view/?u=fastin fastin] | ||
- | [http://www.buddy4u.com/view/?u=prilosec-otc prilosec otc] | ||
- | [http://ditech-mortgage.altavista.in.ua/ditech-mortgages.html ditech mortgages] | ||
- | [http://ditech-mortgage.altavista.in.ua/company-ditech-mortgage.html company ditech mortgage] | ||
- | [http://ditech-mortgage.altavista.in.ua/ditech-mortgage-interest-rates.html ditech mortgage interest rates] | ||
- | [http://ditech-mortgage.altavista.in.ua/mortgage-calculator-and-ditech.html mortgage calculator and ditech] | ||
- | [http://ditech-mortgage.altavista.in.ua/ditech-loan-mortgage.html ditech loan mortgage] | ||
- | [http://ditech-mortgage.altavista.in.ua/ditech-mortgage-calculator.html ditech mortgage calculator] | ||
- | [http://ditech-mortgage.altavista.in.ua/ditech-mortgage-company.html ditech mortgage company] | ||
- | [http://ditech-mortgage.altavista.in.ua/ditech-home-mortgage.html ditech home mortgage] | ||
- | [http://ditech-mortgage.altavista.in.ua/ditech-mortgage-rate.html ditech mortgage rate] | ||
- | [http://tamiflu.algohio.com buy tamiflu] | ||
- | [http://herring.cc.gatech.edu/ActiveLiving buy tenuate] | ||
- | [http://herring.cc.gatech.edu/ActiveSeniors Sports Wagering] | ||
- | [http://herring.cc.gatech.edu/Arch4303 payday loan application] | ||
- | </div> |
Revision as of 09:38, 30 March 2006
You are here: Main Page/DD-WRT Docu (EN)/Squid Transparent Proxy
Introduction
Running a transparent proxy server on your network can be used for more advanced content filtering of web pages for environments such as a school or library (where in some locales, filtering is required by law) or as a way to protect children in the household.
This guide will help you enable a transparent proxy server on your network by having your WRT54G router forward all traffic to the proxy server automatically
Desktop Setup
First install Squid on your unix box after that you have to set up squid to do transparent proxying with these settings
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
Router Setup
You will need to use iptables to tell your router how to forward traffic. If you don't have a good grasp on iptables yet, someone has already done the work and written a shellscript to do the work for you. Be sure to edit the variables at the top.
The script can be found at: http://forum.bsr-clan.de/viewtopic.php?p=10177#10177
#!/bin/sh INTERNAL_NETWORK="192.168.0.0/24" ROUTER_IP="192.168.0.1" PROXY_SERVER="192.168.0.10" PROXY_PORT="3128" if [ -z $TRANSPARENT_PROXY ]; then /usr/sbin/iptables -t nat -A PREROUTING -i br0 -s $INTERNAL_NETWORK \ -d $INTERNAL_NETWORK -p tcp --dport 80 -j ACCEPT /usr/sbin/iptables -t nat -A PREROUTING -i br0 -s ! $PROXY_SERVER -p tcp --dport 80 \ -j DNAT --to $PROXY_SERVER:$PROXY_PORT /usr/sbin/iptables -t nat -A POSTROUTING -o br0 -s $INTERNAL_NETWORK -p tcp -d \ $PROXY_SERVER -j SNAT --to $ROUTER_IP /usr/sbin/iptables -t filter -I FORWARD -s $INTERNAL_NETWORK -d $PROXY_SERVER -i br0 \ -o br0 -p tcp --dport $PROXY_PORT -j ACCEPT export TRANSPARENT_PROXY="1" else echo "This script has already run!" echo "If it hasn't, unset \$TRANSPARENT_PROXY manually via the shell." fi
You'll need to have the script run every time the router boots. An easy way to do is to set as in the rc_firewall variable. From either Telnet/SSH_and_the_Command_Line
# nvram set rc_firewall=" PASTE EDITED SCRIPT HERE "
You can confirm that the changes were made by executing
- nvram get rc_firewall
You are here: Main Page/DD-WRT Docu (EN)/Squid Transparent Proxy