Direct traffic to proxy server after VPN? (for firewall functions)

Nemesis

I've read a lot about how to connect to an openvpn server via a proxy, but is it possible to do the other way?.

I want to connect to my own VPN server (Powered by LuCI openwrt-21.02), and then go thru a proxy.

(because I want to block several of advertisment servers and stuff)
The openvpn server don't have any (or does it?) "filter" / firewall where I can specify denied ip addresses

is it possible to specify an "out" proxy on the VPN server, or even better, denie/redirect directly from the VPN server on some kind of ip-list?

TinCanTech

Nemesis wrote I want to connect to my own VPN server (Powered by LuCI openwrt-21.02), and then go thru a proxy

Simply configure your normal proxy in say Firefox etc..

Nemesis

TinCanTech wrote

that would work for the browser, but now I want everything to go thru some kind of proxy / firewall

TinCanTech

That is your OS not Openvpn.

Nemesis

TinCanTech wrote That is your OS not Openvpn.

if I connect from a phone to my openvpn server, it must be the openvpn server that's deciding which traffic that's allowed thru?

TinCanTech

Nemesis wrote I want to connect to my own VPN server

Nemesis wrote it must be the openvpn server that's deciding which traffic that's allowed thru?

It is your server .. don't you know what is allowed thru ?

Cutting to the inevitable chase, here are some blanks for you to fill in:
https://forums.openvpn.net/viewtopic.php?f=30&t=22603

Stephanie_Sy

The VPN setting should override the setting of your proxy, so you cannot use both proxy and VPN at the same time.

TinCanTech

Openvpn proxy settings in the openvpn config file do not interfere with your other proxy settings.

Unless your OS imposes some other restrictions.

Nemesis

TinCanTech wrote

It's been a while, I've actually forgot I already asked here (I do actually have memory issues), but now I'm back..

I might need to explain it better.

if you install an OpenVPN server on for example Ubuntu, and then connect to the OpenVPN server, you will be routed thru the VPN, that's the point.

but, what I'm after, is to setup the OpenVPN server, so that instead of just letting everything out, it will redirect everything to a proxy server.(where ads & trackers will be blocked with squid & squidGuard)

is there any configuration in OpenVPN server where you can direct the output, to for example an proxy, or another VPN server?

I know that a user could add the proxy settings in their browser, but that would only affect the browser, not the rest of the computer..

so Computer/phone <-> OpenVPN <-> proxy with filter <-> internet.

OR if there are any filter available for for OpenVPN (because then the Proxy isn't necessary)..

sorry if I'm being stupid, have been looking at different solutions since the first post.

TinCanTech

I think you need something like pihole.

Nemesis

TinCanTech wrote I think you need something like pihole.

Pihole has passed my mind, but surely it must be possible to route the output from the OpenVPN server somehow to a proxy server, or am I completely misunderstanding something?

TinCanTech

Routing via this or that does not necessarily engage the services on offer by the host.

I think you are missing something .. so I recommend you start with pi-hole.

Nemesis

TinCanTech wrote Routing via this or that does not necessarily engage the services on offer by the host.

What?

what do you mean with engage the services?

all I want is to route everything from the OpenVPN server to a proxy server, that can't be so hard?
my question is pretty simple; can OpenVPN be told to exit thru a proxy server, or do I need to have the OpenVPN installed on another server, and route the whole dang thing thru the proxy?

..and, sorry for the long delay, don't get any notifications, even thou I've selected it..

..and yes, my memory are so bad that I forget to check for answers..

bert269

Routing traffic through a VPN and then a proxy is definitely doable, though it's a bit of a setup. I've done something similar for privacy reasons. Essentially, after connecting to your VPN, you can set your device to use a proxy for further filtering. As for your VPN server, OpenWRT-based systems like LuCI should allow firewall configurations. You can usually set rules directly in LuCI to block or redirect specific IP addresses, which might be easier and more efficient than using a separate proxy for that purpose. Just dive into the firewall settings on your LuCI dashboard, and you should be able to set up those IP blocklists or redirects right there.

cilimpuli

You can make your VPN traffic through a proxy for extra blocking. I do this, too. I connect to my VPN first and then send the data through a proxy. This way, I get both the VPN's safety and the proxy's extra blocking power.

If your VPN with OpenWRT can't block ads or certain websites directly, using a proxy after the VPN can help. You can set up the proxy to stop the stuff you don't want.

I buy proxy for this. I like the anonymous ones because they keep things private. They're cheap too. I only pay about $1.4 for each one. It's a good deal for the extra control and privacy I get, and it might work well for what you need, too.