1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Tomato web proxy

Discussion in 'Tomato Firmware' started by Kichikichi, Sep 3, 2010.

  1. Kichikichi

    Kichikichi Networkin' Nut Member

    Apologize if this has been covered somewhere but I searched and searched but could not find it.

    I have tomato installed on my asus router. I often travel outside the country and need to set up something so thAt my iPad can access netflix/ abc etc. from outside the country.

    I know that iPad allows you to enter a proxy server. Is there a way to use my home router in us as a proxy server?

  2. rhester72

    rhester72 Network Guru Member

    You can use srelay as a proxy, and either set it up in authenticated mode (and open to the Internet) or have it sit on your network behind OpenVPN (which is how I do it). It works well. For security reasons, I would strongly advise the latter approach.

  3. peyton

    peyton LI Guru Member

    Could you make a tuto on how you made a web proxy with openvpn on tomato ? Thanks
  4. Kichikichi

    Kichikichi Networkin' Nut Member

    Thanks Rodney. How do I compile relay for tomato in an asus router? The only executable I found was for a linksys router. I am assuming I cannot use that for my asus router, right?
  5. rhester72

    rhester72 Network Guru Member


    Once you set up OpenVPN and get that working (for which _many_ tutorials exist), srelay is pretty straightforward - the only option to pass is "-i <lan IP>", where <lan IP> is the IP of br0. The simplest method:

    /path/to/srelay -i `nvram get lan_ipaddr`

    That should be done in the WAN Up script.


    srelay on my site will work on any hardware that supports Tomato.

  6. occamsrazor

    occamsrazor Network Guru Member

    On my router I wanted to allow sRelay proxy access only to those connected via OpenVPN, or on the LAN - i.e. not just anyone on the internet. The script I used is:

    ## Start sRelay proxy and open firewall
    /jffs/srelay -i :2223 -a n -t
    iptables -I INPUT -s -p tcp --dport 2223 -j ACCEPT

    /jffs/srelay is the path to the sRelay binary on my JFFS.
    2223 is the port I chose to be used by sRelay is the addressing given to OpenVPN clients e.g. etc

    Hope this helps. I haven't got it running right now as am in the process of moving the sRelay binary to my USB key.
  7. i1135t

    i1135t Network Guru Member

    I have rhester's knockd and tinyproxy-static running on tomato, so whenever I need to use a proxy, I knock it and it opens for me to use. Else, just establish an OpenVPN connection through SgtPepper's setup to tunnel all traffic back to your Home. :)
  8. Kichikichi

    Kichikichi Networkin' Nut Member

    Thanks guys. Very helpful. Will try these this weekend.

Share This Page