We are a small office of 20 users. Our current network is like below. We have a static IP on the Wireless Router's WAN port.

Local network <-> Wireless Router <-> Cable Internet

I want to put in a Linux box that will run Squid and ownCloud, like below. The ISP's static IP will shift to the Linux box, which will connect to the router's WAN port.

Local network <-> Wireless Router <-> Linux box <-> Cable Internet
  1. Is it possible to configure Squid such that users who connect to the Router do not have to configure any proxy for themselves but (and?) are forced to go through the proxy?
  2. I want to set up whitelists for certain users. Is it possible to enforce whitelists based on ACLs?
  3. How will the ACLs work on mobile devices?
  • What is this magic by which "The ISP's static IP will shift to the Linux box" – symcbean Mar 27 '13 at 10:31
  • ISP has provided a static IP and we have configured the WAN port of the router for it. I intended to configure the external LAN card of the Linux box to use the static IP in the second setup. – Rohit Mar 27 '13 at 10:51

I think this article will include everything you need.


And yes, squid is often used as a transparent proxy, in fact many ISPs implement it unbeknownst to the users in order to reduce traffic.

You should set this up inside your network though, don't put the cache outside the network on the internet (proxies have a bad habit of being heinously abused).

  • Setup to test: 1. Put squid box in LAN, behind router, 2. Configure the "proxee" machines to use the squid box as their gateway and 3. In the router, block all HTTP traffic coming from the "proxee" machines. – Rohit Mar 27 '13 at 14:32

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.