Transparent web proxy

From DD-WRT Wiki

Revision as of 22:57, 5 April 2006 by 1144278013 (Talk | contribs)
Jump to: navigation, search

You are here: Main Page/DD-WRT Docu (EN)/Squid Transparent Proxy


Introduction

Running a transparent proxy server on your network can be used for more advanced content filtering of web pages for environments such as a school or library (where in some locales, filtering is required by law) or as a way to protect children in the household.

This guide will help you enable a transparent proxy server on your network by having your WRT54G router forward all traffic to the proxy server automatically

Desktop Setup

First install Squid on your unix box after that you have to set up squid to do transparent proxying with these settings

httpd_accel_host virtual
httpd_accel_port 80

httpd_accel_with_proxy on

httpd_accel_uses_host_header on

Router Setup

You will need to use iptables to tell your router how to forward traffic. If you don't have a good grasp on iptables yet, someone has already done the work and written a shellscript to do the work for you. Be sure to edit the variables at the top.

The script can be found at: http://forum.bsr-clan.de/viewtopic.php?p=10177#10177

#!/bin/sh
INTERNAL_NETWORK="192.168.0.0/24"
ROUTER_IP="192.168.0.1"
PROXY_SERVER="192.168.0.10"
PROXY_PORT="3128"
if [ -z $TRANSPARENT_PROXY ]; then
  /usr/sbin/iptables -t nat -A PREROUTING -i br0 -s $INTERNAL_NETWORK \
    -d $INTERNAL_NETWORK -p tcp --dport 80 -j ACCEPT
  /usr/sbin/iptables -t nat -A PREROUTING -i br0 -s ! $PROXY_SERVER -p tcp --dport 80 \
    -j DNAT --to $PROXY_SERVER:$PROXY_PORT
  /usr/sbin/iptables -t nat -A POSTROUTING -o br0 -s $INTERNAL_NETWORK -p tcp -d \
    $PROXY_SERVER -j SNAT --to $ROUTER_IP
  /usr/sbin/iptables -t filter -I FORWARD -s $INTERNAL_NETWORK -d $PROXY_SERVER -i br0 \
    -o br0 -p tcp --dport $PROXY_PORT -j ACCEPT
  export TRANSPARENT_PROXY="1"
else
  echo "This script has already run!"
  echo "If it hasn't, unset \$TRANSPARENT_PROXY manually via the shell."
fi


You'll need to have the script run every time the router boots. An easy way to do is to set as in the rc_firewall variable. From either Telnet/SSH_and_the_Command_Line

# nvram set rc_firewall="
PASTE
EDITED 
SCRIPT
HERE
"

You can confirm that the changes were made by executing

  1. nvram get rc_firewall

You are here: Main Page/DD-WRT Docu (EN)/Squid Transparent Proxy













[We are delicate. We do not delete your content.] [l_sp7]

verizon ringtone sleeper sofa bcbg shoes fiancee visa k1 visa free kyocera ringtone bean bag chair stretch mark cream funny ringtone glow necklace beaded curtain buy ativan verizon ringtone free sprint ringtone free verizon ringtone free cingular ringtone sprint ringtone buy tamiflu rivotril christian debt relief barnabas christian debt relief christian based debt relief program christian debt relief christian debt relief debt consolidation debt relief christian debt relief christian counselors debt relief counseling christian alprazolam alprazolam alprazolam alprazolam alprazolam alprazolam alprazolam k1 visa memory foam mattress alprazolam alprazolam alprazolam alprazolam alprazolam curtain rods croton watch alprazolam alprazolam alprazolam alprazolam alprazolam alprazolam alprazolam alprazolam alprazolam alprazolam alprazolam alprazolam alprazolam alprazolam alprazolam Buy phentermine in Canada alprazolam alprazolam alprazolam alprazolam alprazolam alprazolam alprazolam alprazolam alprazolam sitz bath fiancee visa heated mattress pad alprazolam alprazolam alprazolam alprazolam alprazolam alprazolam alprazolam alprazolam alprazolam alprazolam croton watch bcbg shoes curtain rods croton watch bcbg shoes alprazolam alprazolam alprazolam alprazolam alprazolam cialis cialis cialis cialis cialis cialis cialis cialis cialis cialis cialis cialis cialis cialis cialis cialis cialis [http://mywebpage.netscape.com/buycialis/book-buy-cialis-guest-robert-ru-site.ht m cialis] cialis cialis cialis cialis cialis cialis cialis cialis cialis cialis cialis cialis cialis cialis cialis cialis cialis cialis cialis avlimil avlimil avlimil valium valium valium valium valium valium valium valium nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z tramadol hcl nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z nissan 350z free kyocera ringtone free nokia ringtone free nextel ringtone free real ringtone free polyphonic ringtone kyocera ringtones free music ringtone cell phone ringtone funny ringtone Free Verizon Ringtones Free Sprint Ringtones Verizon Ringtone Sprint Ringtone Nextel Ringtone Payday loan application sports wagering cool ringtone jamster ringtones cellular one ringtone free ringtone samsung sgh x427 monophonic ringtone fiancee visa k1 visa pallet racking nextel ringtone verizon ringtone cingular ringtone free sprint ringtone free nextel ringtone Air Purifiers dianabol