EdgeRouter - Web Proxy
Overview
Readers will learn about how to use the Web Proxy service on an EdgeRouter.
- Applicable to the latest EdgeOS firmware on all EdgeRouter models.
- The latest EdgeOS firmware can be downloaded from the EdgeRouter Downloads page.
Domain Filtering using the Web Proxy
The Web Proxy service allows you to filter certain domain names. Follow the steps below to enable the service:
1. Enter configuration mode.
configure
2. Specify the domain name that should be filtered.
set service webproxy domain-block <domain-name>
3. Specify the local IP address that the the web proxy needs to listen on.
set service webproxy listen-address 192.168.1.1
4. Commit the changes and save the configuration.
commit ; save
Filtering using squidGuard
The Web Proxy can also be configured to redirect traffic using squidGuard:
1. Update the Web Proxy blacklist. This download may take a few moments.
update webproxy blacklists
2. Enter configuration mode.
configure
3. Specify the cache size to zero (0) to allow the Web Proxy lists to use unlimited storage.
set service webproxy cache-size 0
4. Specify the default port.
set service webproxy default-port 3128
5. Specify the listen address. The address specified in this step is the LAN interface address.
set service webproxy listen-address 192.168.1.1
6. Specify the memory cache size to limit the memory consumed by the webproxy cache in MB.
set service webproxy mem-cache-size 10
7. Configure URL Filtering to block a category and redirect to Google for example.
set service webproxy url-filtering squidguard block-category ads
set service webproxy url-filtering squidguard default-action allow
set service webproxy url-filtering squidguard redirect-url 'http://www.google.com'
8. Commit the changes and save the configuration.
commit ; save
More URL Filtering functionality is provided with the squidGuard options listed below:
set service webproxy url-filtering squidguard ?
Possible completions:
allow-category Category to allow
allow-ipaddr-url Allow option to allow IP address URLs
auto-update Auto update settings
block-category Category to block
default-action Default action
enable-safe-search Enable safe-mode search on popular search engines
local-block Local site to block
local-block-keyword Local keyword to block
local-block-url Local URL to block
local-ok Local site to allow
local-ok-url Local URL to allow
log Log block category
redirect-url Redirect URL for filtered websites
rule URL filter rule for a source-group
source-group Source group name
time-period Time period name
Related Articles
Intro to Networking - How to Establish a Connection Using SSH