Easy to use firewall and invisible proxy?

[Ed]

On Wed, Sep 24, 2008 at 9:20 AM, George Toft <george at georgetoft.com> wrote:
> I use Smoothwall (which IPCop is a fork of, IIRC).  Add in the
> DansGuardian mod, and you have a real slickety solution.
>
> I mastered the disk onto a CompactFlash card and use it in place of a
> hard drive.  As previously posted here (years ago by someone else), it
> will wear out - I finally wore one out after 2 years of use.  I just
> reimaged a new CF, replaced it and was back online.
>
> What I really like about SW is the built-in VPN and the web interface -
> very easy to use.
>
> George
>
>
>
> On Mon, 2008-09-22 at 22:48 -0700, Alan Dayley wrote:
>> Recomendations sought: Easy to use firewall and invisible proxy.
>>
>> I have friends and family that want a firewall and invisible proxy
>> with content filtering as a gateway on their Internet connection.  I
>> know some of the usual suspects like IPCop[1] with Copfilter[2].
>> Dan's Guardian[3] is also nice for content filtering but does not
>> always behave well with Copfilter.
>>
>> So, rather than continue my late night search, I thought I'd ask here
>> about possible solutions.  There must be some out there already, such
>> as those used in schools and the like.  Does anyone have some
>> recommendations?
>>
>> Alan
>>
>> [1]http://www.ipcop.org
>> [2]http://www.copfilter.org
>> [3]http://dansguardian.org
>> ---------------------------------------------------
>> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
>> To subscribe, unsubscribe, or to change your mail settings:
>> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>

Try OpenBSD -->
http://openbsd.org/faq/faq6.html#Bridge
1) get an old PC with a pair of NIC (~500 Mhz)
2) set up a bridge (transparent) between both NIC and (the PC doesn't
need to have it's own IP addresses)
3) filter traffic with PF

if you need more control look at setting up Squid in tansparent proxy
mode on a similarly invisible bridge -->
http://www.benzedrine.cx/transquid.html
(the PC does need to have it's own IP addresses)