Transparent proxy to forward to non transparent proxy

[pow]

Hi,

 

Tiny little school, not much budget, got a few tablets in that ideally need a transparent proxy to function in life. Their internet connection is LEA provided, one level of filtering with no authentication to the proxy itself (you just specify the address and port and away you go). Just wondering if there is any software/OS that could sit ideally on a VM (but I'll take a physical box if I have to!) and sit between the internet connection and the LAN to take http/https requests that aren't proxied and forward them on to the proxy - so basically make internal proxy the default gatway, specify no proxy on the device, it takes the request and forwards it on to proxy.lea.sch.uk:8080?

 

Would squid do that I want?

 

Thanks for any pointers in advance

[GeekyPete]

Take a look at Smoothwall.org - it's open source. You may need a way to identify the devices, like setting up a separate SSID and giving it it's own DHCP scope.

[pow]

I'm just installing Ubuntu server on a VHD to set squid up to see if it'll do what I want

[ReBoot]

I'm just installing Ubuntu server on a VHD to set squid up to see if it'll do what I want

 

You will need something to intercept packets and redirect them to Squid to make a Transparent Proxy - I use Shorewall rules to do this. I don't believe Squid on its own will do the packet interception. General consensus is to make a non-transparent proxy intitially - get it working - then make it transparent. Good luck.

[ReBoot]

Sorry didn't read carefully enough. I don't think squid will do what you require. You need something to intercept packets from the tablets and redirect them to your LEA proxy. You will need packet forwarding enabled on your unbuntu box and then something to configure IP Tables such as Shorewall to setup the rules for interception and redirection of http traffic.

[pow]

I can point the tablets towards the squid box as the default gateway, might try that!

[Duke5A]

You need two NICs in the system and IPTables needs to be setup to forward HTTP traffic to Squid. There are plenty of guides online for setting this up. For passing traffic to an upstream filtering proxy looking at the cache_peer directive in Squid.

[dhicks]

Would squid do that I want?

 

You might find the following Squid setup, with comments, handy:

 

http://www.edugeek.net/forums/nix/11689-squid-transparent.html

 

That post is now over 7 years old, so might be a little out of date.