OUR NETWORK:TiVo Community TechLore Explore3DTV DVRplayground Dijit Community See all... About UsAdvertiseContact Us

Problems with Privoxy and VLAN/BR1

 
Learn about scoring Download Discussion's Raw Score: 116002.0
December 4, 2011 12:29 AM
Rating (0 votes)
  • 1
  • 2
  • 3
  • 4
  • 5
Rate This!

Member Avatar

mac913

Member

I'm having troubles trying to get Privoxy to work VLAN/BR1. I'm also forcing BR1 DNS to OpenDNS. When Privoxy is disabled BR1 works fine. Here are my BR1 firwall scripts...

# br1 Web Access Only 
# See -- http://www.dd-wrt.com/wiki/index.php/Separate_LAN_and_WLAN 
iptables -I FORWARD -i br1 -m state --state NEW -j ACCEPT 
iptables -I FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu 
iptables -I FORWARD -i br1 -o br0 -m state --state NEW -j DROP 
iptables -I FORWARD -i br1 -d `nvram get wan_ipaddr`/`nvram get wan_netmask` -m state --state NEW -j DROP 
iptables -I INPUT -i br1 -m state --state NEW -j DROP 
iptables -I INPUT -i br1 -p udp --dport 67 -j ACCEPT 
iptables -I INPUT -i br1 -p udp --dport 53 -j ACCEPT 
iptables -I INPUT -i br1 -p tcp --dport 53 -j ACCEPT

# Limit br1 from too many connections 
iptables -t nat -I PREROUTING -p tcp -i br1 -m connlimit --connlimit-above 200 -j DROP 
iptables -t nat -I PREROUTING -i br1 -p ! tcp -m connlimit --connlimit-above 100 -j DROP
# Force OpenDNS to br1 
iptables -t nat -I PREROUTING -p udp -s 192.168.20.0/24 --dport 53 -j DNAT --to 208.67.222.222 
iptables -t nat -I PREROUTING -p tcp -s 192.168.20.0/24 --dport 53 -j DNAT --to 208.67.222.222

Using the above script with Privoxy and BR1 has no Internet Access. 
When I add the following script to by-pass Privoxy, 
I get Internet Access but DNS is not forced to 208.67.222.222.

# By-Pass Transparent Privoxy for br1 -- Required for br1 to get Internet Access with Privoxy -- 
iptables -t nat -I PREROUTING -i br1 -s 192.168.20.0/24 -j ACCEPT

How can I get Privoxy to work with BR1 and still force BR1 to OpenDNS? 
I'm using Privoxy in Transparent Mode for all users.




Discussion:    Add a Comment | Comments 1-2 of 2 | Latest Comment

December 4, 2011 9:18 PM updated: December 4, 2011 9:22 PM

I have ironed-out my BR1 DDNS issues with Privoxy enabled for BR0.

Can't seem to get Privoxy to work with BR1, currently BR1 is by-passing Privoxy for Internet Access.

December 27, 2011 9:17 AM

You have to use privoxy custom config and adjust listen address

Discussion:    Add a Comment | Comments 1-2 of 2 | Latest Comment

Add Your Reply

(will not be displayed)

Email me when comments are added to this thread

 
 

Please log in or register to participate in this community!

Log In

Remember

Not a member? Sign up!

Did you forget your password?

You can also log in using OpenID.

close this window
close this window