LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Server (https://www.linuxquestions.org/questions/linux-server-73/)
-   -   PPTPD website filtering (https://www.linuxquestions.org/questions/linux-server-73/pptpd-website-filtering-4175448514/)

linuxakias 02-03-2013 08:50 PM

PPTPD website filtering
 
Hello,

I have a PPTPD server and i like to know if is any way to allow traffic from/to specific websites.

Also if its possible to have a logfile with the pages my pptpd users visiting of any other way to know to witch sites going.


Thank you

scheidel21 02-05-2013 07:03 PM

Routing or IPTables could be of assistance is telling or allowing traffic to go to and from specific sites. Which one you use will depend on your setup to some extent.
As far as logging if you want a real log of where logged on VPN users are going place a proxy between your server and the Internet and have all traffic directed through it. Then you will have a log of all sites visited and by what IP.

linuxakias 02-08-2013 09:02 AM

Thank you very much !


Is it possible to setup a proxy without demanding extra setting from the client side ? If yes, what proxy software you suggest?


Thanks




Quote:

Originally Posted by scheidel21 (Post 4885125)
Routing or IPTables could be of assistance is telling or allowing traffic to go to and from specific sites. Which one you use will depend on your setup to some extent.
As far as logging if you want a real log of where logged on VPN users are going place a proxy between your server and the Internet and have all traffic directed through it. Then you will have a log of all sites visited and by what IP.


scheidel21 02-08-2013 12:02 PM

Yes u can set up a proxy with out intervention from the client side, it's called an inline proxy often transparent to the user. I would recommend SQUID it's pretty much the defacto open source proxy out there. There are other good ones, but this is one of the most widely used. Basically you will want to proxy all traffic from the machine. It's been a while since I worked with a PoPToP server but you would use IPtables to feed the traffic through the proxy server. This http://www.dataparadis.net/osp/gnu-l...-pptp-traffic/ will start to give you an idea of what has to be done with the traffic via IPTables. This won't be the easiest thing in the world, but it won't be the hardest either.

linuxakias 02-09-2013 12:38 AM

Thanks a lot ;)

Quote:

Originally Posted by scheidel21 (Post 4887168)
Yes u can set up a proxy with out intervention from the client side, it's called an inline proxy often transparent to the user. I would recommend SQUID it's pretty much the defacto open source proxy out there. There are other good ones, but this is one of the most widely used. Basically you will want to proxy all traffic from the machine. It's been a while since I worked with a PoPToP server but you would use IPtables to feed the traffic through the proxy server. This http://www.dataparadis.net/osp/gnu-l...-pptp-traffic/ will start to give you an idea of what has to be done with the traffic via IPTables. This won't be the easiest thing in the world, but it won't be the hardest either.



All times are GMT -5. The time now is 07:24 AM.