NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

dunogod's avatar
dunogod
Aspirant
Mar 15, 2019

Route internal IP range to web proxy

Hello Experts,

 

I have a situation where one of my family members has become rather astute at using VPNs to circumvent the controls that I've put in place to block them from accessing certain sites, ports and protocols.  Because I have other family members who are allowed through certain ports, I can't block, say Port 443 as I need it for VPN into my job from time to time...and the said family member also needs access to that port for online school.

 

That said, I've ordered a Raspberry Pi 3B+ to act as a web proxy between my RBR50 (FW v2.2.1.210) and my Xfinity cable modem.  However, I only want a specific IP range to be routed through this proxy 24/7/365.  How do I go about doing that?

5 Replies

  • FURRYe38's avatar
    FURRYe38
    Guru - Experienced User

    I believe you'll need to configure the interconnecting device, ie. Raspberry Pi for this and then configure the Orbi for AP mode and let the Pi do all the IP and routing handling. 

     

    I would contact the Pi Mfr and present this to them to ensure there product can support what your asking. 

     

     

    • dunogod's avatar
      dunogod
      Aspirant

      FURRYe38 wrote:

      I believe you'll need to configure the interconnecting device, ie. Raspberry Pi for this and then configure the Orbi for AP mode and let the Pi do all the IP and routing handling. 

       

      I would contact the Pi Mfr and present this to them to ensure there product can support what your asking. 

       

       


      FURRYe38, what do you think about setting the DNS to the RPi and having the RPi determine if the IP making the request needs to have whitelist rules applied?  If not, the request is passed through to the cable modem (gateway)?

      • FURRYe38's avatar
        FURRYe38
        Guru - Experienced User

        I would ask the Pi mfr if this is possible. They should know. Let us know what you find out. 


        dunogod wrote:

        FURRYe38 wrote:

        I believe you'll need to configure the interconnecting device, ie. Raspberry Pi for this and then configure the Orbi for AP mode and let the Pi do all the IP and routing handling. 

         

        I would contact the Pi Mfr and present this to them to ensure there product can support what your asking. 

         

         


        FURRYe38, what do you think about setting the DNS to the RPi and having the RPi determine if the IP making the request needs to have whitelist rules applied?  If not, the request is passed through to the cable modem (gateway)?


         


  • dunogod wrote:

    .........

    I have a situation where one of my family members has become rather astute at using VPNs to circumvent the controls that I've put in place to block them from accessing certain sites, ports and protocols. 

    .........


    Why not using Circle with Disney and block VPN usage for the family member?

    • dunogod's avatar
      dunogod
      Aspirant

      I do.  Doesn't work for most VPN services as the Circle service relies on blacklists maintained by Disney which the VPN providers circumvent by changing IPs...frequently.