posted on Jul, 16 2014 @ 05:10 AM
a reply to: AnonBelgium
You could try it BUT keep in mind some ISP's don't let third party network equipment directly connect to their network over PPPE (again my ISP as
Mine is OK and i can even connect a PC to the ISP and use Poppe but if they did try to block me then I would chain a router/firewall and send the WAN
to the router supplied by the ISP.
As you know many ISPs leave hidden open ports in the free routers they give you and that was a big red flag to me.
on pfSense it seems that you need to install and run a squid plus a squid extension to get url filters working and this has put me off using it plus i
don't think it lets you group services in the firewall rules.
what i have decided to go for is two routers with one being in the usual place and the other less secure router being connected to a second card on
the machine that runs the DNS/Proxy server and then get IPads to wifi to the new router.
I will need to write a bit of software to relay from the new wifi card to the exsisting LAN card and don't think i can just bridge it as i want to
block some ports and i don't think i can do that on a bridge and using sockets i know how to streaam NC1 to NC2 on port XXX but i don't have a clue
how to bind to all ports at the same time apart from how to sniff the network but we will see.
This is a bit like sharing a pc wifi connection to create a public hot-spot with the added advantage of forceing all port 80 traffic to a proxy server
without needing a outbound NAT and also allows me to play with SSL trafffic on devices that don't allow the use of a proxy server plus it allows me
to stop my Samsung TV poking around my LAN on devices that don't have a firewall like ipads, phones, xbox and sky boxes using DLNA i think its
Just blocking device on exit to the internet using none standard ports is only half the answer and i would use a VLAN to isolate devices on LAN2 but i
still want the proxy server because this is where you can realy see what in the request and decide to block/allow or tweak the request.