Blocking users' access to internet and instead acces it through proxy... How?! Help!

[tooone7]

Hi there, so i'm soon upgrading to a 4mb line (from the 384kb) Awesome!

Ok so now i want to share the network equally between 4 people. And during some hours some users get priority.

I have installed CCProxy which is perfect for what i need. The only problem is that I don't want to set up proxies for all programs on all the user's pcs. They can't be trusted to keep it on.

I want to force them to use the proxy without altering my network setup.

My network is set up like this:

User 1 (Proxy) \
User 2 -------- \
----------------->---- Router -------- Internet
User 3 -------- /
User 4 ------- /

Now i've got it working. If i tell each pc that I'm the proxy.

But if they turn off the proxy setting they are directly connected to the internet and i cannot apply restrictions.

In CCProxy's help file it says "Configure the NAT in the router and block all LAN IP address accessing NAT except the server IP address." In my router help file it says that it is possible.

I just don't know how to go about setting up the NAT in my router. I've been trying the whole day to do this and googling and searching, to no avail.

Basically i want to force them to use the proxy and if they don't they have no way of connecting to the internet.

I have a Telkom ADSL 5102G Router

Please, can anyone help me?

 

[ponder]

Is the User 1 pc going to stay on/connected 24/7/365?

Personally I would use a spare low power box with two lan cards running linux as a router/proxy/cache/download box but that's just me. Getting advanced networking stuff done in Windows can be a pita.

 

[tooone7]

Hey thanks for your reply.

That would probably be ideal but at the moment i don't have the money to buy an extra box however low power

Why isn't it documented anywhere how to do the NAT blocking thing. In my router's manual it just say that it is possible but it doesn't tell you how to configure it.

 

[Nerfherder]

One PC needs to have exclusive access.

What you can do is set your router to bridge mode and then make your PC the one that dials up (keep the router password secure as well as the isp login). You then limit the number of sessions to 1. Then the other users will only be able to connect to the network and use your proxy.

Downside you must always leave your PC on.

 

[tooone7]

Yeah that could work. Thanks for the suggestion.

Yes its a pretty bad drawback. It will be best to get a separate box to act as the server

I'll give your suggestion a shot tomorrow. Thanks Nerfherder

I would still like to know how to block all IPs except mine/the server's using NAT. If anyone knows, and can help. That'd be awesome.

 

[syntax]

Or just set firewall on router to only allow outgoing traffic from your machine.