Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We are a small office of 20 users. Our current network is like below. We have a static IP on the Wireless Router's WAN port.

Local network <-> Wireless Router <-> Cable Internet

I want to put in a Linux box that will run Squid and ownCloud, like below. The ISP's static IP will shift to the Linux box, which will connect to the router's WAN port.

Local network <-> Wireless Router <-> Linux box <-> Cable Internet
  1. Is it possible to configure Squid such that users who connect to the Router do not have to configure any proxy for themselves but (and?) are forced to go through the proxy?
  2. I want to set up whitelists for certain users. Is it possible to enforce whitelists based on ACLs?
  3. How will the ACLs work on mobile devices?
share|improve this question
What is this magic by which "The ISP's static IP will shift to the Linux box" – symcbean Mar 27 '13 at 10:31
ISP has provided a static IP and we have configured the WAN port of the router for it. I intended to configure the external LAN card of the Linux box to use the static IP in the second setup. – Rohit Mar 27 '13 at 10:51
up vote 1 down vote accepted

I think this article will include everything you need.


And yes, squid is often used as a transparent proxy, in fact many ISPs implement it unbeknownst to the users in order to reduce traffic.

You should set this up inside your network though, don't put the cache outside the network on the internet (proxies have a bad habit of being heinously abused).

share|improve this answer
Setup to test: 1. Put squid box in LAN, behind router, 2. Configure the "proxee" machines to use the squid box as their gateway and 3. In the router, block all HTTP traffic coming from the "proxee" machines. – Rohit Mar 27 '13 at 14:32

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.