Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I manage a number of public hotspots, at different sites, with routers running the dd-wrt firmware and I now want to (centrally) control the websites they have access to. So, my idea initially was to implement Squid as a transparent proxy (using iptables to forward router traffic) and set it up for filtering only. The only problem with this (if I understand it correctly?) is the Squid server will have to have sufficient bandwidth to handle both outbound (from routers) and inbound traffic (to routers) - the server will be remote to the routers, on the internet. I have the following server restrictions:

  • must be cloud-based, on the internet
  • as low as possible bandwidth
  • simple (quick) to implement solution
  • solution must be scalable (as routers are added)

My first question: is it possible to configure Squid to only intercept, and filter, the outbound data from the routers and allow the inbound traffic to go directly back to the routers, from the websites they requested?

Please note: I have considered using a Captive Portal solution but this will take longer, than I have time for, to implement and will have the same traffic problem!? I have also looked at OpenDNS for filtering, but the logging is not realtime - good, realtime logging is important for me.

Any suggestions on how this can be done using Squid, or any other relevant solutions, would be appreciated...

share|improve this question

2 Answers 2

The fastest way is to make use of OpenDNS service to do the web filtering based on the domain name used.

Disclaimer: I don't work or affiliated to the said company.

share|improve this answer
    
Thanks bintut, but as I mentioned above I don't believe the OpenDNS logs are realtime. Ideally, I would like to be able to integrate these web-request logs with my other logs to give me the complete picture of what's happening on the routers... –  Jessica Jan 12 '12 at 11:26
    
If that is the case, you may want to check the appliances from Untangle, SmoothWall, Juniper SRX or Barracuda if any of their solution is within your budget. –  bintut Jan 12 '12 at 14:30

You can look at http://www.entensys.com/products/gatewall_dns_filter/. I believe there is live log access available. I looked at this a while back.

share|improve this answer
    
Thanks Tim. Impressive feature list, including per User stats, but too expensive for me! Was hoping to find an OSS solution I could implement and manage myself with option to customise, if needed. I do like the DNS Filter approach though! I wonder how hard this would be to implement without buying a commercial solution? –  Jessica Jan 12 '12 at 13:16

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.