/url_blocker

Minimal Parental control url_rewriter for squid and squidguard

Primary LanguagePHPMIT LicenseMIT

Squid Redirector

Credits goes to https://github.com/sanderiana/squid-url-rewrite-program

https://wiki.squid-cache.org/Features/Redirectors
This script is for url_rewrite_program directive.
Requirements: squid-3.4+ php-7+

This works with firefox

Installation:

  • copy php files to some folder.
  • add execution permission to redirector.php.
  • edit url_rewrite_program directive. squid.conf
url_rewrite_program /path/to/redirector.php
  • reload squid config
squid -k reconfigure

Configuration:

config.php

# timeout period on a script
'time_out' => 86400,

'redirect' => [
  # domain : from url
  # port : port
  # redirect : to url  
   
  # any port 
  ['domain' => '127.0.1.1', 'redirect' => '127.0.0.1'],

  # some port
  ['domain' => '127.0.0.1', 'port' => '80', 'redirect' => '10.0.0.1'],
  ['domain' => '127.0.0.1', 'port' => '81', 'redirect' => '10.0.0.2'],
  ['domain' => '127.0.0.1', 'redirect' => '10.0.0.3'],
]

# Disable privacy mode for firefox
It is a good idea to disable private mode for firefox for some
reason that I won't explain here.
install policies.json to /usr/lib/firefox/distribution if firefox (not the link) is installed in /usr/lib/firefox

You know that these policies are used if the proxy can't be changed.

TODO if possible
  - prevent user from edit / clear history
  - avoid g++ gcc (that would allow to build a browser)
  - the user must not be able to install anything (nix, snap, apt ...)
  - rewrite this README

# see Test section

Test:

$ ./redirector.php
127.0.1.1                       # input
OK status=302 url="127.0.0.1"   # output
127.0.0.1:80                    
OK status=302 url="10.0.0.1"        
127.0.0.1:81                    
OK status=302 url="10.0.0.2"        
127.0.0.1                       
OK status=302 url="10.0.0.3"    
127.0.0.2                              
127.0.0.2

License:

MIT
My small candy project.