EdgeRouter - Web Proxy


Overview


Readers will learn about how to use the Web Proxy service on an EdgeRouter.

NOTES & REQUIREMENTS:
Applicable to the latest EdgeOS firmware on all EdgeRouter models. Please see the Related Articles below for more information.
 
Device used in this article:

Domain Filtering using the Web Proxy


Back to Top

ATTENTION: The web proxy service only works on HTTP (not secured) traffic.

The Web Proxy service allows you to filter certain domain names. Follow the steps below to enable the service:

CLI: Access the Command Line Interface. You can do this using the CLI button in the GUI or by using a program such as PuTTY.

1. Enter configuration mode.

configure

2. Specify the domain name that should be filtered.

set service webproxy domain-block <domain-name>

3. Specify the local IP address that the the web proxy needs to listen on.

set service webproxy listen-address 192.168.1.1

4. Commit the changes and save the configuration.

commit ; save

Filtering using squidGuard


Back to Top

The Web Proxy can also be configured to redirect traffic using squidGuard:

CLI: Access the Command Line Interface. You can do this using the CLI button in the GUI or by using a program such as PuTTY.

1. Update the Web Proxy blacklist. This download may take a few moments.

update webproxy blacklist

2. Enter configuration mode.

configure

3. Specify the cache size to zero (0) to allow the Web Proxy lists to use unlimited storage.

set service webproxy cache-size 0

4. Specify the default port.

set service webproxy default-port 3128

5. Specify the listen address. The address specified in this step is the LAN interface address.

set service webproxy listen-address 192.168.1.1

6. Specify the memory cache size to limit the memory consumed by the webproxy cache in MB.

set service webproxy mem-cache-size 10

7. Configure URL Filtering to block a category and redirect to Google for example.

set service webproxy url-filtering squidguard block-category ads
set service webproxy url-filtering squidguard default-action allow
set service webproxy url-filtering squidguard redirect-url 'http://www.google.com'
NOTE: Use the ? at the end of the block-category command to view all available categories.

8. Commit the changes and save the configuration.

commit ; save

More URL Filtering functionality is provided with the squidGuard options listed below:

set service webproxy url-filtering squidguard ?
Possible completions:
  allow-category        Category to allow
  allow-ipaddr-url      Allow option to allow IP address URLs
  auto-update           Auto update settings
  block-category        Category to block
  default-action        Default action
  enable-safe-search    Enable safe-mode search on popular search engines
  local-block           Local site to block
  local-block-keyword   Local keyword to block
  local-block-url       Local URL to block
  local-ok              Local site to allow
  local-ok-url          Local URL to allow
  log                   Log block category
  redirect-url          Redirect URL for filtered websites
  rule                  URL filter rule for a source-group
  source-group          Source group name
  time-period           Time period name

Related Articles


Back to Top

Intro to Networking - How to Establish a Connection Using SSH


We're sorry to hear that!