Easiest transparent proxy to setup? Just need it for the iPads and Guest access.

[DCUK6]

Looking to setup something that will capture all web traffic from devices that arnt setup to use the proxy and diverts it through a proxy.

 

Ive tried setting one up before in my training days and found you could kill a entire network with one when its plugged in.

 

Our LEA tried doing something recently but it almost killed their network so now they are just letting schools get on with it themselves.

 

After something really easy to setup as i know its probably going to be in linux, doesn't have to have any more features other than redirecting internet traffic.

 

Any suggestions?

 

Cheers

[slancaster]

we use Smoothwall and for transparent stuff it seems fine. Proper authenticaion / user tracking is tricker on a iPad though.

[thebatman]

We use a program called 'any_proxy' installed on Vyatta or VyOS. We did need to tweak it a little to stop it from logging as this would fill up a 1TB in a day.

[Foresthippy]

Have you thought about using wpad auto proxy instead? Not sure what your reasons are for needing transparent proxy for iPads but wpad might fulfil whatever need you have, and is probably easier to implement.

[DCUK6]

Have wpad already but ipads etc don't pick it up automatically and require you to enter the address manually on each device.

 

Dont really want to do this on guest machines.

 

 

Looks like any_proxy runs on squid.

 

I think squid is the way to go but i hate linux with a passion at the minute.

Edited March 17, 2015 by DCUK6

[localzuk]

WPAD does work on iPads - we've been using it here for 2 years.

 

You just have to make sure you have both DHCP 252 and DNS wpad records set up.

[DCUK6]

o right,

never found definitive answer on if it worked or not and somewhere in the microsoft documentation says it would only work for machines joined to the domain.

 

The other thing stopping me was of the security issue that they blocked it for originally.

 

I try and keep things secure as possible so if squid fails again i might have to go ahead.

 

Only problem with the squid box is that as far as i know, you need to set it as the gateway.

Edited March 17, 2015 by DCUK6

[maniac]

Not sure if Untangle will do this? They have paid for a free modules in their software.

 

https://www.untangle.com/