Setting up a proxy server at home and accessing via wifi?

BoxBox Regular
edited May 2011 in Tech & Games
How would I go on about setting up a proxy server at home, and remotely accessing it via wifi?

Comments

  • AmieAmie Regular
    edited May 2011
    I'm assuming you want to do this to prevent people from snooping your traffic when you connect to an open wifi. If not, give more info as to what you want.

    The easiest way to go about this is:
    1. Set up a linux server (any *nix will suffice actually)
    2. Enable SSH
    3. Create a dummy account with no priviliges on the server
    4. Open a port in your router (assuming you're behind a hardware firewall - as most people are)
    5. Set up something like dyndns (which is free)
    6. Set up an SSH tunnel to your home server
    7. And route the traffic of your browser through the tunnel

    This will keep all traffic between your computer and your server completely encrypted, so all anybody will see passing between your laptop and your server is packets destined for the port you opened on your home IP with random bits in 'em. Your home server will send the traffic to the internet like you would if you were sitting at home, receive it back and send it to your laptop torugh the encrypted tunnel once again.

    Google all of it, ask questions if you don't understand things. I might post more tomorrow, too tired to be bothered now.
  • BoxBox Regular
    edited May 2011
    I want to bypass web filters at facilities that have unsecured wifi spots.

    I recall meddling around with dyndns some time in the past...
  • DfgDfg Admin
    edited May 2011
    For Windows:
    A) Small HTTP Server ]or a better server [Enable proxy server mode]
    B) Dyndns [make an account and use the desktop program to keep IP changes updated]
    C) Forward whatever port you want, you can set AUTH in Small HTTP Server if you want. {I ma referring to the router]

    And you're mostly done.
  • AmieAmie Regular
    edited May 2011
    Box wrote: »
    I want to bypass web filters at facilities that have unsecured wifi spots.

    I recall meddling around with dyndns some time in the past...

    SSH tunnel will work.

    If the network's admin is being restrictive about what ports he lets access the internet, you're going to have to send the traffic trough port 22 or port 80 (those are used for regular internet traffic so they have to be open if you can connect to the internet). This has the disadvantage that those ports are the ones most frequently scanned for servers with vulnerabilities, so you're gonna need to make sure your server is secure (pick strong passwords / use keyfiles, disable root login, log in as an unpriviliged user for the tunnel, use up to date software and disable any services and applications running on the server you don't need).
  • SlartibartfastSlartibartfast Global Moderator -__-
    edited May 2011
    If you don't want to muck about with SSH tunnels you can use apache + phproxy as a quick, no hassle method.
  • edited May 2011
    Phproxy FTW. Read this guide which I wrote - http://www.totse.info/cms/set-up-a-proxy-server

    If you need some help, post in this thread and I'll point you in the right direction.
  • BoxBox Regular
    edited May 2011
    Hold on.

    So I do as said ITT, set up a proxy server at home.

    Then I can access it a mile away via wifi?

    I don't get it. How does this shit work? :confused:
  • edited May 2011
    Hold on, what are you getting at here? You want to access your proxy server, you'd have to connect to the internet and browse to the IP address of your server.

    You can't access it with WiFi alone, especially a mile away. WiFi doesn't go that far unless you have some ultra awesome antenna, and even if you did - how would you connect to your proxy server without being connected to the internet?

    I'm a little confused...
  • BoxBox Regular
    edited May 2011
    trx100 wrote: »
    Hold on, what are you getting at here? You want to access your proxy server, you'd have to connect to the internet and browse to the IP address of your server.

    You can't access it with WiFi alone, especially a mile away. WiFi doesn't go that far unless you have some ultra awesome antenna, and even if you did - how would you connect to your proxy server without being connected to the internet?

    I'm a little confused...

    That's what I was referring in the op as 'remotely accessing it.' LOL, I was just looking into this,

    [ame="http://en.wikipedia.org/wiki/Wireless_community_network"]Wireless community network - Wikipedia, the free encyclopedia@@AMEPARAM@@/wiki/File:Patras_Wireless_Network_5.jpg" class="image"><img alt="" src="http://upload.wikimedia.org/wikipedia/commons/thumb/0/0f/Patras_Wireless_Network_5.jpg/220px-Patras_Wireless_Network_5.jpg"@@AMEPARAM@@commons/thumb/0/0f/Patras_Wireless_Network_5.jpg/220px-Patras_Wireless_Network_5.jpg[/ame]

    This would make one fucking awesome DIY project over the summer.
  • AmieAmie Regular
    edited May 2011
    Box wrote: »
    How would I go on about setting up a proxy server at home, and remotely accessing it via wifi?

    Pretty clear question
    Box wrote: »
    I want to bypass web filters at facilities that have unsecured wifi spots.

    I recall meddling around with dyndns some time in the past...

    All still seems pretty clear
    Box wrote: »
    Hold on.

    So I do as said ITT, set up a proxy server at home.

    Then I can access it a mile away via wifi?

    I don't get it. How does this shit work? :confused:

    Starting to get confused :confused:
    Box wrote: »
    That's what I was referring in the op as 'remotely accessing it.' LOL, I was just looking into this, ...

    The hell, man? Can't help you with this.

    "Leaves thread"
  • BoxBox Regular
    edited May 2011
  • SlartibartfastSlartibartfast Global Moderator -__-
    edited May 2011
    Some people have done a similar thing in New Zealand with woks.

    google: wok antenna.
  • DaktologistDaktologist Global Moderator
    edited May 2011
    Some people have done a similar thing in New Zealand with woks.

    google: wok antenna.

    supposedly they work quite well
  • DfgDfg Admin
    edited May 2011
    Reads OP.

    Smiles.

    For this two work you will need to draw a circle and do the hola dance.


    But honestly it's pretty simple and expensive.

    We have two options here,
    A) Setup a Wimax system.
    B) Setup a Wifi System

    Option A is expensive and out of the questions because you can't just go ahead and make one.

    Option B is easy but requires a bit of investment.

    You will need:
    A) A kickass motherfucking router that supports N-G band. [or a switch]
    B) Some repeaters.
    C) Windows 7
    D) Two NICs.

    I am assuming your connect to your Internet via ADSL or a different connection.

    Like:
    You have ADSL and you connect to using your Ethernet card. That card has the IP 192.168.6.2 and your router IP is 192.168.6.1
    This is the seperate system.

    Then you have another ethernet card and it connects with your wireless switch. That card has IP 192.168.7.2 and your switch doesn't have an IP or incase it's a router you can give it 192.168.7.3 if you want.

    This is te basic setup. The idea is to isolate two networks. Anyone connecting to your Wifi won't get internet access but will be able to access 192.168.7.2 which is your system.

    We can then setup Internet Connection sharing or if you want to go wild we can setup a proxy. We're going to use Small HTTP Server, it has a proxy server built=in.

    The server runs at 192.168.7.2:9082

    Using Windows 7 Firewall we can limit the networks and easily block options like sharing etc to our public network [wifi].

    This completes the setup, although you will require some tweaking and testing.

    Infrastructure:
    Get a kickass antenna, power up your wireless router, connect on LAN cable to your ethernet card from the switch/router into your PC, connected your Laptop to wifi and try to ping 192.168.6.2 if it works you can access the system, if it doesn't you need to disable DHCP in router and manually add your IP address to 192.168.7.4 [using ICS you can do tons of things but we can talk about it later]

    Once that's done, we can then start adding repeaters throughout one mile radius in this way you're network can be accessed from a mile away. These repeaters will require power etc but again I didn't say this approach was cheap. A good directional attenna might work and you could easily use one or two repeaters placed in different spots. The Network can be secured if required. You can enable MAC filtering, hide the SSID and totally block anything from accessing your PC from wifi network unless it's your PC.

    I am currently using this sort of setup at home, I got a Wifi router to play with and I just experimented with it today, the process I explained above can work. Good luck.
Sign In or Register to comment.