On 29/10/2021 17:39, Mark Rogers wrote:
On Fri, 22 Oct 2021 at 09:34, Paul Tansom paul@aptanet.com wrote:
You can use a standard ssh install to create the Socks proxy, so no need for extra software installs. The incantation is something along the lines of:
ssh -i ~/.ssh/id_rsa -D 1080 -f -C -q -N user@hostname.tld
Where: [...]
Ah, that's pretty much perfect, thank you!
For Firefox just go to the bottom section of the Settings where you have Network Settings and a button to configure things.
Are you aware of a way to enable/require the proxy only for certain addresses? I have no need/desire to send all web traffic via my Pi.
Slow reply as life has become a tad complicated over the past couple of weeks and I'm juggling family, work and other commitments, whilst not actually being at home that much. That has, in fact, meant that I've just come across the same issue, but not actually found a solution yet. I'm wondering whether there's some sort of (regular?) expression that can be used in the area to set sites you don't want to use the proxy for that gets across "any site that isn't in this IP address range" or something like that.
I've had the added issue of having to mess with my hosts file, which I can't remember having done for years, to make up for the fact that I'm not on my local network to access my local Bind DNS server. What I really need is my Wireguard VPN back up and running, but that's another story! [1]
One possibly, but rather clunky, option would be to use different web browsers, and if you want to use the same one (working on Firefox as my example) either use profiles or alternative installs. Firefox profiles requires a close and restart of the browser (so possibly no easier than flipping to the settings and enabling/disabling the proxy; which thankfully remembers the values for the disabled option), but I'm not sure if the profiles in other browsers can handle different proxy setups (you would hope), or a Socks proxy. If you're on Ubuntu, or other Snap supporting distro you can install the deb and Snap packages at the same time, or try an Appimage (not sure how up to date it is kept) or Flatpak (not tried, but would require a few extra bits to get it running).
If I manage to come up with a solution I'll post another reply.
[1] Long story short, I've switched ISPs [2] and my old Wireguard setup on my OpenWrt router has gone and I'm working on getting a new one up and running in Docker, but not quite managinge (not helped by initially also wanting to deploy it with Ansible). I could put it on my EdgeRouter, but it doesn't integrate as smoothly as it should and will be a bit of a cludge.
[2] Accepting that there are people worse off for speed, my FTTC connection peaks at 16Mbps, which is less than a friends ADSL used to peak at (17Mbps, all be it with the cabinet a couple of feet from their garden). As such I've been forced to Virgin for a cable connection, which has forced me to temporarily (hopefully) abandon IPv6; and move from native support to a tunnel - ho hum.