PPTPD website filtering

Hello,

I have a PPTPD server and i like to know if is any way to allow traffic from/to specific websites.

Also if its possible to have a logfile with the pages my pptpd users visiting of any other way to know to witch sites going.


Thank you

Routing or IPTables could be of assistance is telling or allowing traffic to go to and from specific sites. Which one you use will depend on your setup to some extent.
As far as logging if you want a real log of where logged on VPN users are going place a proxy between your server and the Internet and have all traffic directed through it. Then you will have a log of all sites visited and by what IP.

Thank you very much !


Is it possible to setup a proxy without demanding extra setting from the client side ? If yes, what proxy software you suggest?


Thanks

Originally Posted by scheidel21 Routing or IPTables could be of assistance is telling or allowing traffic to go to and from specific sites. Which one you use will depend on your setup to some extent. As far as logging if you want a real log of where logged on VPN users are going place a proxy between your server and the Internet and have all traffic directed through it. Then you will have a log of all sites visited and by what IP.

Yes u can set up a proxy with out intervention from the client side, it's called an inline proxy often transparent to the user. I would recommend SQUID it's pretty much the defacto open source proxy out there. There are other good ones, but this is one of the most widely used. Basically you will want to proxy all traffic from the machine. It's been a while since I worked with a PoPToP server but you would use IPtables to feed the traffic through the proxy server. This http://www.dataparadis.net/osp/gnu-l...-pptp-traffic/ will start to give you an idea of what has to be done with the traffic via IPTables. This won't be the easiest thing in the world, but it won't be the hardest either.

Thanks a lot

Originally Posted by scheidel21 Yes u can set up a proxy with out intervention from the client side, it's called an inline proxy often transparent to the user. I would recommend SQUID it's pretty much the defacto open source proxy out there. There are other good ones, but this is one of the most widely used. Basically you will want to proxy all traffic from the machine. It's been a while since I worked with a PoPToP server but you would use IPtables to feed the traffic through the proxy server. This http://www.dataparadis.net/osp/gnu-l...-pptp-traffic/ will start to give you an idea of what has to be done with the traffic via IPTables. This won't be the easiest thing in the world, but it won't be the hardest either.