ackdev/secure_proxy_securitas-wall repository overview

Debian & Raspberry Raspbian Secure Router (Bridge with Transparent Proxy)

Homepage & support available at https://www.securitasmachina.com⁠

Minimum System Requirements:

4gb memory

Web Protection

-Leverages a vast, continuously-updated database of known malicious web sites, MalWare & RansomWare Content inspection utilizing ClamAV AntiVirus

Privacy Protection

-Ad blocking and Ad filtering to remove online advertising in your web browser.

Parental Web Filtering

-Web filtering to prevent engagement with websites and social networking blogs.

WebAdmin

-Navigate to port 80 of your SecureWall AP http://securewall-⁠?? where ?? is randomally assigned characters shown at install time Use user: admin password: secret

IP Tables Configuration

CLIENTS -> WIFI -> Docker Device -> ETHERNET -> Internet Router

echo "Add IPTables Modules"

modprobe br_netfilter

modprobe ip_conntrack

⁠Generated by xtables-save v1.8.2 on Sun Sep 29 05:45:54 2019

*nat

:PREROUTING ACCEPT [0:0]

:INPUT ACCEPT [0:0]

:POSTROUTING ACCEPT [0:0]

:OUTPUT ACCEPT [0:0]

-A PREROUTING -p tcp -m physdev --physdev-in wlan0 -m tcp --dport 443 -j REDIRECT --to-ports 13443

-A PREROUTING -p tcp -m physdev --physdev-in wlan0 -m tcp --dport 80 -j REDIRECT --to-ports 13080

-A POSTROUTING -j MASQUERADE

COMMIT

*mangle

:PREROUTING ACCEPT [0:0]

:INPUT ACCEPT [0:0]

:FORWARD ACCEPT [0:0]

:OUTPUT ACCEPT [0:0]

:POSTROUTING ACCEPT [0:0]

COMMIT

*filter

:INPUT DROP [3:862]

:FORWARD ACCEPT [12618:4476160]

:OUTPUT ACCEPT [0:0]

-A INPUT -i lo -j ACCEPT

-A INPUT -i br0 -j ACCEPT

-A INPUT -i wlan0 -p tcp -m tcp --dport 13080 -m state --state NEW,ESTABLISHED -j ACCEPT

-A INPUT -i wlan0 -p tcp -m tcp --dport 13443 -m state --state NEW,ESTABLISHED -j ACCEPT

-A INPUT -p tcp -m tcp --dport 22 -m physdev --physdev-in wlan0 -j ACCEPT

-A INPUT -p tcp -m tcp --dport 22 -m physdev --physdev-in eth0 -j ACCEPT

-A FORWARD -m state --state INVALID -j DROP

-A FORWARD -m state --state INVALID -j LOG --log-prefix "Drop Invalid v4 "

-A OUTPUT -o lo -j ACCEPT

-A OUTPUT -o br0 -j ACCEPT

-A OUTPUT -p udp -m udp --sport 53 -j ACCEPT

COMMIT

*nat

:PREROUTING ACCEPT [0:0]

:INPUT ACCEPT [0:0]

:POSTROUTING ACCEPT [0:0]

:OUTPUT ACCEPT [0:0]

-A PREROUTING -p tcp -m physdev --physdev-in wlan0 -m tcp --dport 443 -j REDIRECT --to-ports 13443

-A PREROUTING -p tcp -m physdev --physdev-in wlan0 -m tcp --dport 80 -j REDIRECT --to-ports 13080

-A POSTROUTING -j MASQUERADE

COMMIT