Koozali.org: home of the SME Server

Obsolete Releases => SME 7.x Contribs => Topic started by: elgoth2003 on October 04, 2007, 09:36:46 PM

Title: sme as a proxy
Post by: elgoth2003 on October 04, 2007, 09:36:46 PM

I'm looking for a way to block external access to my local proxy. I use the proxy for a dansguardian filter and I had been looking through the logs and found out that people can access my proxy externally and use it.  Any suggestions??

Title: Re: sme as a proxy
Post by: mmccarn on October 05, 2007, 05:46:16 AM

It sounds like you're running into http://bugs.contribs.org/show_bug.cgi?id=2658, which should be fixed if you install the updates released on September 30: http://forums.contribs.org/index.php?topic=38709.0

Title: Re: sme as a proxy
Post by: kevinb on October 05, 2007, 07:23:45 AM

I had the same issue.

I changed a setting in the danguardian.conf to have it only look at the internal IP.


Kevin

Title: Re: sme as a proxy
Post by: cactus on October 05, 2007, 08:59:49 AM

Quote from: kevinb on October 05, 2007, 07:23:45 AM

I had the same issue.

I changed a setting in the danguardian.conf to have it only look at the internal IP.

That is exactly what the fix in bug 2658 (http://bugs.contribs.org/show_bug.cgi?id=2658) suggested by mmccarn in an earlier post (http://forums.contribs.org/index.php?topic=38740.msg175922#msg175922) does.

Title: Re: sme as a proxy
Post by: elgoth2003 on October 05, 2007, 06:24:27 PM

I updated the server last night and I'm still able to access the proxy from my house. Anything else I should try??

Title: Re: sme as a proxy
Post by: Franco on October 05, 2007, 07:12:27 PM

Quote from: elgoth2003 on October 05, 2007, 06:24:27 PM

I updated the server last night and I'm still able to access the proxy from my house. Anything else I should try??

Did you try what kevinb suggested?

Title: Re: sme as a proxy
Post by: kevinb on October 05, 2007, 09:28:03 PM

Edit the /etc/dansguardian/dansguardian.conf file and set the filterip to your machines local IP:

Code: [Select]

# the IP that DansGuardian listens on.  If left blank DansGuardian will
# listen on all IPs.  That would include all NICs, loopback, modem, etc.
# Normally you would have your firewall protecting this, but if you want
# you can limit it to a certain IP. To bind to multiple interfaces,
# specify each IP on an individual filterip line.
filterip =

(e.g. filterip=192.168.1.1)

Title: Re: sme as a proxy
Post by: elgoth2003 on October 23, 2007, 03:13:40 PM

I'm still confused on what filterip will do. Do I specify the filterip of the server itself??

Title: Re: sme as a proxy
Post by: mmccarn on October 23, 2007, 03:22:40 PM

Set 'filterip' to the LAN IP of your SME - this will cause it to *stop* listening on both the LAN and WAN IPs as it does by default.