Hi everyone,

I have a small network where clients are running OpenVPN.

I would like to implement a Squid proxy on the Access Server for the purposes of controlling acceptable use of the VPN. I've never done this before and am having quite a bit of difficulty getting the OpenVPN Access Server to route all traffic to the squid proxy running on the same box.

The goal is basically to lock down the VPN so clients can only use it to browse certain websites.

First, is this even possible if the sites are running on HTTPS?

Second, if so, what are the proper iptables rules to force all outbound traffic from the OpenVPN Access Server to the locally running Squid service?

Basically, I'd like to lock the OpenVPN clients into only being able to access a single https:// URL.

Any help is most appreciated.

Thank you

Hi,

what mode of vpn are you hosting ? ie. routed or bridged ?

add the following line to your vpn server.conf file :

push "redirect-gateway def1"

this will redirect ALL the traffic through the vpn , probably just in case someone wants to use third party proxies.

As for the squid part you can refer this link :

http://www.linuxquestions.org/questi...pn-4175511172/


Hope this helps.