Forward all outgoing web to anonymizer

tresero · Feb 24, 2010, 11:01 PM

Is there anyone who has forwarded all web traffic to an anonymizer?

Thanks

tommyboy180 · Feb 25, 2010, 1:05 AM

I have a way of doinging this without the use of pfsense.
Basically I use two systems. One connecting to a VPN and the other behind the VPN.

You can find more information at http://www.tomschaefer.org/web/wordpress/?p=861

Not sure if you can find a way to use pfsense in the mix but I have not been able to do this. The problem is that pfsense cannot be a pptp client.

If you need more information let me know.

tresero · Feb 25, 2010, 5:14 PM

Thanks for the page, I will look into it and let you know what I find out.

Jon

clarknova · Feb 25, 2010, 5:38 PM

@tommyboy180:

The problem is that pfsense cannot be a pptp client.

How so? I'm using 1.2.3-Release and PPTP is an option on my WAN interface. I've never used it, but isn't that what you're referring to?

Eugene · Feb 26, 2010, 3:50 AM

@tresero:

Is there anyone who has forwarded all web traffic to an anonymizer?

Thanks

How would you describe this scenario?

tommyboy180 · Feb 27, 2010, 5:43 AM

pfsense can be a pptp server, but not client.
So when people want to force all WAN traffic to go through an anonymizer it's very difficult. You have to come up with another way to do it, unfortunately.

As far as I know there are no plans for a pptp client in pfsense unless someone makes an addon, but that would be very difficult.

Eugene · Feb 27, 2010, 4:38 PM

@tommyboy180:

pfsense can be a pptp server, but not client.

Choosing PPTP at WAN interface set up page turns pfSense into pptp-client, doesn't it?

jimp · Feb 27, 2010, 7:24 PM

@Eugene:

@tommyboy180:

pfsense can be a pptp server, but not client.

Choosing PPTP at WAN interface set up page turns pfSense into pptp-client, doesn't it?

No. That is for some ISPs (mainly in Russia I think) that use PPTP like others use PPPoE. Solely as a means of authentication/connectivity.

Someone might have luck pulling this off using squid and a proxy service which can act like an upstream/parent proxy for squid.

Eugene · Mar 4, 2010, 6:40 PM

@jimp:

No. That is for some ISPs (mainly in Russia I think) that use PPTP like others use PPPoE. Solely as a means of authentication/connectivity.

Could you please elaborate on this? Yes in Russia PPTP connection to ISP is widely used. You get static IP subnet (usually local RFC1918) at WAN interface then bring PPTP connection up to access internet. But pfSense IS pptp-client in this scenario, no?
PS: tried to look for info about it in FAQ's and HOWTOs, still not clear -(

jimp · Mar 4, 2010, 7:19 PM

It is a PPTP client, yes, but it's not in the sense that you can connect to some random arbitrary PPTP server out on the Internet in general. It's for connecting up to an ISP at the next hop.

Eugene · Mar 4, 2010, 7:20 PM

Ok. Thank you.