Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a linux firewall / gateway (SME Server) and need to configure it to act as a proxy for a certain ip subnet and I'm not sure what server / daemons would work presently to meet my needs. As noted it's an SME Server (, but is essentially CentOS 5.7.

My use case is that I have a developer who needs to access some of my server resources from Europe, however some of the resources are not allowing access to the US servers. Consequently I need to tunnel all Internet traffic through my own personal office connection so that a US IP is seen. I figure the best way to accomplish this is via setting up a proxy that only allows his subnet so that I don't open a can of worms.

The other option is to just tunnel traffic through ssh, but perhaps would require some more configuration on his part.

I'd like to keep this as simple as possible. What options exist presently?

share|improve this question
up vote 1 down vote accepted

I do not think you are looking for a proxy, unless you are looking to share http or related protocols on your intranet, even in that case it is a reverse proxy.

The problem you describe more sounds like a Virtual Private Network setup. The simplest way I met VPN like setup. The easiest way to do it from behind a firewall is with Hamachi to my experience (this is a client to client end to end solution).

Otherwise you are looking to setup an IPSec implementation on the gateway such as OpenSwan. It all depends on how wide access you need to provide to your local network.

If it is only a particular service on a single machine or a few it might be easiest to do ssh tunneling this can be done through the gateway machine as well.

share|improve this answer
Yes, I've been playing with ssh tunneling and vpn options. Thanks. There are no seemingly real simple solutions off the top. It's not needed a lot and I don't need to give the user actual access to my local network, but it's about one in the same it seems in terms of the means to the end. – ylluminate Mar 1 '12 at 19:20

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.