Do I have to control the very browser host side that is used? What if the router I control does not allow using other proxies out on the Internet? Do I need to set up a local squid instance? Has anyone gotten a man in the middle squid instance to actually work with https? Firefox especially fights if you are in the middle with a proxy, I've tried Diladele web safety. If only I could passively proxy. I don't want to filter, I just want to see where you are actually going and record it for the boss or the parents. I am not interested in governments looking in, just the boss or the parents. I'm only breaching privacy for the person(s) the boss or the parents select. There is sound reasoning for having accountability. Certain content on the Internet is addictive and unhealthy. If your employee or child is into this content, you need to know at least.
If I restrict the browser the host can use to one that reports, how would I go about that? If I need to transparently proxy, I've never done that successfully. Are there port 443 TOR proxies that I need to proactively block at the router? How would I go about doing that effectively? The 1-2-3 masquerade approach to giving Internet access is unnecessary, but you have to have a working transparent proxy that can do https if you don't Masquerade. I've never been able to do that. Google is the worst offender when it comes to sites being https instead of plain old http. If you force a proxy, https still has to work. Seems like you could somehow create a local certificate for any https site and also attach the remote certificate... but that doesn't seem to work. Maybe a browser like SPIN can be used on non Android computers... but SPIN filters I think and I just want to track. There is still the issue of blocking other browsers if you go the SPIN route. Maybe, if I control the router, I can require some sort of authentication that requires you to use a particular browser. If I have to be on the host and control the router, what has to be on the host? For example let's look at Linux, CentOS 8 is my desktop system. We can also look at Windows and MacOS. Can I do a firefox extension that has a hard to guess key and proxy settings where no other proxy settings including no proxy will work? You have to get and install the extension from me to have Internet period, at least at a particular location. I'd have to provide physical protection of the Internet modem, connection, and router. There's no stopping a person from using the 3G/4G cell phone network, but maybe this doesn't have to be perfect. If I'm reporting all Internet activity on a particular host for 24 hours, the absence of data will be a red flag. -- Michael C. Robinson _______________________________________________ PLUG mailing list [email protected] http://lists.pdxlinux.org/mailman/listinfo/plug
