Tinyproxy
You want to filter web access? You don't trust in client-based solutions? The tinyproxy addon package for Fritz!Boxes is the right thing for you!
Prerequisites:
You have to have DS-MOD installed with sufficient iptables support (if you are unsure, just go to the DS-MOD configuration menu and check all items in "Advanced options" => "Kernel modules" => "net" and in "Advanced options" => "Shared libraries" => "iptables"). For more details about ds-mod see here and there.
Installation:
Extract the archive into your <ds-mod directory>/addon, so afterwards there is a new directory like e.g. ds-0.2.7/addon/tinyproxy-1.7.0. Now edit the file <ds-mod directory>/addon/static.pkg to contain a line saying
Configuration:
You have now included tinyproxy into your DS-MOD, you uploaded the new firmware image and rebooted you Fritz!Box. Now you can configure tinyproxy. The standard configuration is (very unobtrusively) set to non-filtering (web access through tinyproxy is not filtered) and non-exclusive (your clients are not forced to use tinyproxy and can connect directly to the internet).
If you want to change that, you have to use telnet or ssh to connect to your Fritz!Box (there is no neat web interface at the moment). You can use the "mvi" command to edit /tmp/flash/tinyproxy.conf and /tmp/flash/tinyproxy.filter, plus you can use the command
I recommend testing the proxy before making it exclusive! To do that, edit your browser's preferences to use the proxy "192.168.178.1" (default, if you changed it you will know) and port "8080". If you still can connect to the internet after you restarted your browser, it works. To be 110% sure, watch the output of the command
DOWNLOAD
(35 kB)
Prerequisites:
You have to have DS-MOD installed with sufficient iptables support (if you are unsure, just go to the DS-MOD configuration menu and check all items in "Advanced options" => "Kernel modules" => "net" and in "Advanced options" => "Shared libraries" => "iptables"). For more details about ds-mod see here and there.
Installation:
Extract the archive into your <ds-mod directory>/addon, so afterwards there is a new directory like e.g. ds-0.2.7/addon/tinyproxy-1.7.0. Now edit the file <ds-mod directory>/addon/static.pkg to contain a line saying
tinyproxy-1.7.0and you're done. Now rebuild your ds-mod image (the command is "make") and re-upload it onto your Fritz!Box.
Configuration:
You have now included tinyproxy into your DS-MOD, you uploaded the new firmware image and rebooted you Fritz!Box. Now you can configure tinyproxy. The standard configuration is (very unobtrusively) set to non-filtering (web access through tinyproxy is not filtered) and non-exclusive (your clients are not forced to use tinyproxy and can connect directly to the internet).
If you want to change that, you have to use telnet or ssh to connect to your Fritz!Box (there is no neat web interface at the moment). You can use the "mvi" command to edit /tmp/flash/tinyproxy.conf and /tmp/flash/tinyproxy.filter, plus you can use the command
modconf set tinyproxy TINYPROXY_CATCHALL=yesto make all web traffic (that is, all requests directed to port 80) go through tinyproxy (of course, you can set the value to "no" again). To make your changes permanent, you have to call modsave afterwards!
I recommend testing the proxy before making it exclusive! To do that, edit your browser's preferences to use the proxy "192.168.178.1" (default, if you changed it you will know) and port "8080". If you still can connect to the internet after you restarted your browser, it works. To be 110% sure, watch the output of the command
wget --server-response --spider http://www.google.deIf you see the line "Via: 1.0 proxy (tinyproxy/1.7.0)" then you know tinyproxy did forward it to you.
DOWNLOAD
(35 kB)
- 1803 reads