Koozali.org: home of the SME Server
Obsolete Releases => SME Server 7.x => Topic started by: p1ur on December 22, 2010, 06:25:43 PM
-
Hi
Can I use my sme-server as a proxy server for a external user, who is in a country, where webpages is blocked?
external user - > my sme-server -> webpages that is blocked on external users location
If yes, how?
P1ur
-
VPN?
-
p1ur
You could setup a specific proxy pass domain to point to a specific external URL
See the FAQ link at top of page
VPN will also work.
-
Hi
Thanks for the answers.
I've been looking ProxyPass in the FAQ: http://wiki.contribs.org/SME_Server:Documentation:FAQ#Proxy_Pass
The FAQ says: “certain requests” so before I go further, I would like to understand how it works:
How does this work for the external user?
Shall I put a link on a external webpage on the server, or???
If I want to proxypass facebook, this must be the command, right?
db domains set facebook.com domain
db domains setprop facebook.com Nameservers internet
db domains setprop facebook.com ProxyPassTarget http://66.220.149.11/
db domains setprop facebook.com TemplatePath ProxyPassVirtualHosts
signal-event domain-create facebook.com
Sorry for any stupid questions :?
P1ur
-
I am using beHidden.com (http://beHidden.com) proxy for similar purpose. They provide high speed, non-detectable proxy. They are using cloud technology and they have very powerful proxy. Socks or ads blocker elite proxy work best for me. But sometimes I am using http as well, depends on configuration. They also allow to have up to three users on the account simultaneously. Cool. It is very handy for the gaming.
-
If I want to proxypass facebook, this must be the command, right?
db domains set facebook.com domain
db domains setprop facebook.com Nameservers internet
db domains setprop facebook.com ProxyPassTarget http://66.220.149.11/
db domains setprop facebook.com TemplatePath ProxyPassVirtualHosts
signal-event domain-create facebook.com
No, you don't want to do that. The ProxyPass feature exists to allow you to have domains which you contol appear to be hosted on your server when they are in fact elsewhere - e.g other internal servers which aren't directly connected to the Internet.
I'm presuming that facebook.com is not your website and you do not control the DNS for facebook.com. :-)
-
To expand on what Charlie said, ProxyPass is a directive that goes into a "<VirtualHost>" declaration in httpd.conf. Consequently, for proxypass to work, your remote user must access your sme server using the domain name you have configured in proxypass. You can do this by creating a DNS entry in your public DNS, or by manually editing the 'hosts' file on the remote computer.
One way to do this would be to create a free account at dyndns.com, and establish a domain name something like "myfbproxy.dyndns.org", which you then point to the public IP of your SME server or to your existing SME server public host name using a CNAME record.
Then, you would setup proxypass on your SME like this (assuming your original commands were almost correct):db domains set myfbproxy.dyndns.org domain
db domains setprop myfbproxy.dyndns.org Nameservers internet
db domains setprop myfbproxy.dyndns.org ProxyPassTarget http://66.220.149.11/
db domains setprop myfbproxy.dyndns.org TemplatePath ProxyPassVirtualHosts
signal-event domain-create myfbproxy.dyndns.org
You can also "ProxyPass" by hostname; you could set the ProxyPassTarget to http://www.facebook.com. If you use a hostname for ProxyPassTarget, it must resolve correctly *from the SME server*.
-
I use http://http-tunnel.sourceforge.net/ (http://http-tunnel.sourceforge.net/) to get access to the internet via my SME server from work. The PHP server is set up (with the PHP5 contrib) in an ibay, and the user runs a perl client (Strawberry PERL is a good portable perl distribution for Windows to go with Portable Firefox and Portable Thunderbird) which redirects web requests from the browser via squid on my SME box. All the requests are compressed (sadly the PHP5 contrib does not have CRYPT support compiled in, so no encryption) and base64 encoded for transport.
It can be a bit slow, but works a treat, bypassing local proxy filters, and link tracking (all proxy traffic is to/from my home server).
Si