EdgeRouter - Web Proxy


Overview


Readers will learn about how to use the Web Proxy service on an EdgeRouter.

NOTES & REQUIREMENTS:
Applicable to the latest EdgeOS firmware on all EdgeRouter models. Please see the Related Articles below for more information.
 
Device used in this article:

Domain Filtering using the Web Proxy


Back to Top

ATTENTION: The web proxy service only works on HTTP (not secured) traffic.

 

CLI: Access the command line interface (CLI). You can do this using the CLI button in the GUI or by using a program such as PuTTY.

1. Enter configuration mode.

configure

2. Specify the domain name that should be filtered.

set service webproxy domain-block <domain-name>

3. Specify the local IP address that the the web proxy needs to listen on.

set service webproxy listen-address 192.168.1.1

4. Commit the changes and save the configuration.

commit ; save

 

Filtering using squidGuard


Back to Top

CLI: Access the command line interface (CLI). You can do this using the CLI button in the GUI or by using a program such as PuTTY.

1. Using Operational mode in the CLI, update the blacklist. This download may take a few moments.

update webproxy blacklist

2. Enter configuration mode.

configure

3. Specify the cache size to zero to allow unlimited storage for the lists in MB.

set service webproxy cache-size 0

4. Specify the webproxy default port.

set service webproxy default-port 3128

5. Specify the listen address. The address specified in this step is the LAN interface address.

set service webproxy listen-address 192.168.1.1

6. Specify the memory cache size to limit the memory consumed by the webproxy cache in MB.

set service webproxy mem-cache-size 10

7. Configure URL Filtering to block a category and redirect to Google.

set service webproxy url-filtering squidguard block-category ads
set service webproxy url-filtering squidguard default-action allow
set service webproxy url-filtering squidguard redirect-url 'http://www.google.com'
NOTE: The commands above blocks the "ads" category. It is possible to use the command below to view all possible categories.
 
set service webproxy url-filtering squidguard block-category ?

8. Commit the changes and save the configuration.

commit ; save

More URL Filtering functionality is provided with the squidGuard options listed below

set service webproxy url-filtering squidguard ?
Possible completions:
  allow-category        Category to allow
  allow-ipaddr-url      Allow option to allow IP address URLs
  auto-update           Auto update settings
  block-category        Category to block
  default-action        Default action
  enable-safe-search    Enable safe-mode search on popular search engines
  local-block           Local site to block
  local-block-keyword   Local keyword to block
  local-block-url       Local URL to block
  local-ok              Local site to allow
  local-ok-url          Local URL to allow
  log                   Log block category
  redirect-url          Redirect URL for filtered websites
  rule                  URL filter rule for a source-group
  source-group          Source group name
  time-period           Time period name

Related Articles


Back to Top

Intro to Networking - How to Establish a Connection Using SSH


We're sorry to hear that!