Encrypted Proxy - Alternative to SSH Tunnel?

[solidpace]

Hello everyone,
I've been using my Raspberry Pi as a re-routing station for internet traffic through SSH to avoid strict internet filtering and the possibility of 'eavesdropping' where I live part of the time. This has worked wonderfully, but I'm looking for some alternative to SSH to reach the same result, i.e. sending all data encrypted to the Pi and then doing the actual web requests from it and the network it's connected to.
Doing it through SSH means always having to use a terminal or Putty to make the connection; and I'd actually need some way that eliminates that step and all proxy connections/settings could be done in-browser (Chrome/Firefox) only as only my own laptop has a terminal, and I'd need access to unfiltered internet even through computers I can't install any extra software to or change administrative (e.g. system-wide network) settings.
I've tried to google for answers, but haven't really found anything that doesn't involve installing some sort client on the machine from which you want to connect.
If anyone has any idea of how (if?) this could be achieved I'd be very thankful!

[ascplit]

As a network admin, if I went through the trouble to lock you down with a proxy, I would lock out your ability to edit the proxy settings with a restrictive GPO. Have you checked to see if you can even change the proxy settings? That being said, you can set up squid on the Pi as a proxy server. (If its available in the Pi's repository "apt-get install squid")

I think you would still be better off and more secure using SSH to tunnel. You can set it to only tunnel port 80 info and then if you are somewhere that restricts installing applications, just run putty off a thumb drive. (Unless, like us, you are restricted from running executable's from flash drives.)

Here is a link with some proxy server info for the Pi. - http://www.raspberrypi.org/phpBB3/viewt ... =36&t=8392

[solidpace]

The proxy settings in the browsers themselves are free to edit, although all changes are lost on restarting the browser. I'll probably still use SSH whenever connecting from my own computer, but I'd really need the possibility to connect without software from other computers as well. And we're restricted from using thumbdrives at all, the computers don't recognise them.

Many thanks for the Squid suggestion, looking into it now!

[john564]

PPTP , L2TP, IPSec VPN clients are installed by default on windows machines and Android phones
so you don't need to install s/w, just need to configure client.

http://www.stuffaboutcode.com/2012/08/r ... erver.html

[solidpace]

PPTP , L2TP, IPSec VPN clients are installed by default on windows machines and Android phones
so you don't need to install s/w, just need to configure client.

http://www.stuffaboutcode.com/2012/08/r ... erver.html

Granted, but the computers' network and administrative settings are locked down, which is why a browser-only alternative is necessary.

[john564]

Granted, but the computers' network and administrative settings are locked down, which is why a browser-only alternative is necessary.

Ok, you want your own PHProxy. a HTTPS Web site you surf to, that allows you surf to other
normally blocked web sites. Its a proxy via a web browser.

http://sourceforge.net/projects/poxy/
http://www.101hacker.com/2011/09/create ... -site.html
http://lifehacker.com/5447726/install-p ... cked-sites

There are many free PHProxy sites, but I would not trust them, just google free PHProxy

e.g. of free public PHproxy
http://screwbeingsingle.com/
(unless its yours, don't trust them)

[ghans]

... and then bring a portable browser which has your own SSL
certificate on the whitelist.


ghans

[john564]

here is a quick guide I wrote for PHproxy server on Raspberry PI
http://www.raspberrypi.org/phpBB3/viewt ... 36&t=42023

it needs improvement like using HTTPS instead of HTTP
sorry , I don't know how to do that. Any help welcome

To access the server from outside, you need to do port forwarding on your router
and get a domain name.