Hi all,
I'm running a whiterussian v0.9 on a wl500gp, and I would like to set up a gateway/proxy on which data exchanged would be encrypted.
The idea is to use public wifi (restaurant, park...) which is most of the time not secure and to make all the traffic go through my router (at home, through my Internet connection). The data between me in a public park and my router being encrypted, the ones between my router and the visited (destination) websites not encrypted.
I heard about ipsec, ssh tunneling and so on but I don't really know which of these would be simpler and more secure to implement.
Thanks in advance.
Topic: Encrypted proxy / gateway - to secure public utilization
The content of this topic has been archived on 19 Mar 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.
if you only need secure web access then google up on ssh and use it as a socks proxy and configure your browser to use the ssh tunnel as a socks proxy. works fine and its dead easy to set up as OpenWRT already has ssh/dropbear installed. Combine it with ssh keys and you've got a winner!
Thanks for the quick answer.
But will the DNS traffic also be taken into account ?
I wonder if not just the HTTP one will be through that method (okay then most part of the effective data will be protected anyway...)
no it does not solve dns privacy, but I keep a local dns cache so I didnt bother with it. The next step is a full on VPN solution, but socks and semi protected dns is fine by me. Its probably possible to tunnel dns too, but since dns use udp then I couldnt be bothered to tunnel it with ssh - but ofcourse you can investegate that route too.
Okay you mean you keep in local a matching table of names and ips... that prevents false/fake dns answers (that could lead to phishing).
Since I already have dropbear installed, I will look in that direction first, thanks (dropbear or openssh I guess...)
come on - try and seach somewhere, anywhere...
http://www.google.com/search?q=dns+socks
.. the second hit is how to enable dns over socks in firefox, and I'm sure you'll find other interesting solutions if firefox is not an alternative.
Okay thanks for the clue :-)
The discussion might have continued from here.
