Route internal IP range to web proxy

Question

Hello Experts,
&nbsp;
I have a situation where one of my family members has become rather astute at using VPNs to circumvent the controls that I've put in place to block them from accessing certain sites, ports and protocols.&nbsp; Because I have other family members who are allowed through certain ports, I can't block, say Port 443 as I need it for VPN into my job from time to time...and the said family member also needs access to that port for online school.
&nbsp;
That said, I've ordered a Raspberry Pi 3B+ to act as a web proxy between my RBR50 (FW v2.2.1.210) and my Xfinity cable modem.&nbsp; However, I only want a specific IP range to be routed through this proxy 24/7/365.&nbsp; How do I go about doing that?

FURRYe38 · Answer

I believe you'll need to configure the interconnecting device, ie. Raspberry Pi for this and then configure the Orbi for AP mode and let the Pi do all the IP and routing handling.&nbsp;
&nbsp;
I would contact the Pi Mfr and present this to them to ensure there product can support what your asking.&nbsp;
&nbsp;
&nbsp;

ekhalil · Answer

dunogod&nbsp;wrote:
.........
I have a situation where one of my family members has become rather astute at using VPNs to circumvent the controls that I've put in place to block them from accessing certain sites, ports and protocols.&nbsp;
.........

Why not using Circle with Disney and block VPN usage for the family member?

dunogod · Answer

I do.&nbsp; Doesn't work for most VPN services as the Circle service relies on blacklists maintained by Disney which the VPN providers circumvent by changing IPs...frequently. 
&nbsp;

dunogod · Answer

FURRYe38&nbsp;wrote:
I believe you'll need to configure the interconnecting device, ie. Raspberry Pi for this and then configure the Orbi for AP mode and let the Pi do all the IP and routing handling.&nbsp;
&nbsp;
I would contact the Pi Mfr and present this to them to ensure there product can support what your asking.&nbsp;
&nbsp;
&nbsp;

FURRYe38,&nbsp;what do you think about setting the DNS to the RPi and having the RPi determine if the IP making the request needs to have whitelist rules applied?&nbsp; If not, the request is passed through to the cable modem (gateway)?

FURRYe38 · Answer

I would ask the Pi mfr if this is possible. They should know. Let us know what you find out.&nbsp;
dunogod&nbsp;wrote:
FURRYe38&nbsp;wrote:
I believe you'll need to configure the interconnecting device, ie. Raspberry Pi for this and then configure the Orbi for AP mode and let the Pi do all the IP and routing handling.&nbsp;
&nbsp;
I would contact the Pi Mfr and present this to them to ensure there product can support what your asking.&nbsp;
&nbsp;
&nbsp;

FURRYe38,&nbsp;what do you think about setting the DNS to the RPi and having the RPi determine if the IP making the request needs to have whitelist rules applied?&nbsp; If not, the request is passed through to the cable modem (gateway)?

&nbsp;

Forum Discussion

Route internal IP range to web proxy