You are not logged in.
Good morning. ![]()
As I regularly surf the webs via a GPRS/modem uplink, I'm very often annoyed by high-res pictures, java, flash and the like (i.e. bloat sites).
Because of this I got the idea of setting up a proxy on my VPS to minimize traffic and eventually do some filtering.
Is there any software or combination of software that allows me to do the following:
---
-relatively secure and actively developed software
-user-based access control
-"webwasher" (content and site filter, blacklisting, whitelisting), rules per user
-image-compression
-dns caching
-data caching
-SOCKS
Does anyone have such a setup running and wants to tell me/us about it?
Yours,
Unrest
Last edited by unrest (2010-06-29 06:01:50)
To thine own self be true.
Offline
polipo (standard proxy software + cache) + privoxy (will remove all ads) + zipproxy (if you need image compression)
Polipo and zip are in AUR, privoxy is in repos.
Offline
I've been reading up on SQUID, but have not yet implemented it. It looks like it is able to do the stuff you want.
Offline
I use squid. It's on par with BIND and apache in the sense that it seems to be what the big guys use. It's config file is so big it scares the hell out of me but believe it or not, it is easy to set up ![]()
![]()
Offline
I didn't consider SQUID an option, because to me it seems/seemed that it's intended to be used as an internet proxy for and from an intranet/LAN., Am I wrong?
@ammon: Are you using this setup and are there other useful daemons/scripts that can add to it?
To me it seems that polipo is a "eierlegende Wollmilchsau", how we call it in german. Thank you! ![]()
To thine own self be true.
Offline
I didn't consider SQUID an option, because to me it seems/seemed that it's intended to be used as an internet proxy for and from an intranet/LAN., Am I wrong?
@ammon: Are you using this setup and are there other useful daemons/scripts that can add to it?
To me it seems that polipo is a "eierlegende Wollmilchsau", how we call it in german. Thank you!
Im using polipo + privoxy. Nothing to add, I can only post you my config for polipo/privoxy.
Heh, I had to google for the phrase. ![]()
Offline
I fiddled a bit with polipo and privoxy and found no way of restricting access to me, and only me.
Both proxies' access-restrictions are based on static IPs and/or subnets.
What possible ways of "keeping the world out" are left, albeit VPN/RADIUS and manually starting up and stopping my proxy chain?
To thine own self be true.
Offline
Well ya, make VPN or SSH the only way into the server, then connect to the proxy on the localhost or use iptables to send all traffic destined to port 80 or 443 to the internal listening port of your proxy.
Last edited by hunterthomson (2010-07-05 01:12:57)
OpenBSD-current Thinkpad X230, i7-3520M, 16GB CL9 Kingston, Samsung 830 256GB
Contributor: linux-grsec
Offline