Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I want to hide our internal LAN IP's(static IPs) behind squid proxy. I have done configuration, now all the traffic are going through squid proxy only. What I assume that after I configure squid no one from outside of our LAN could not able to remote desktop to any local LAN systems, but it is not working as I thought of. I am able to do remote desktop from out side after I configure Proxy server LAN but I shouldn't. what would be the problem, should I do something else with squid? or squid can't do what I want? If not is there any other technology could satisfy my requirement?

My requirement is No one should do remote desktop from outside to our LAN's system. If someone want to do remote desktop to our LAN's system they should be connected over secure connection. we are thinking about LDAP to make secure connection. other then secure connection nothing should be allow.

I hope that am able to explain what I want.

Additional info: I am using Mikrotik router(final gateway) for our LAN. Traffic are pass over proxy server which is also connected in our LAN.

share|improve this question
    
You need a firewall, not a proxy. –  heavyd Nov 20 '13 at 14:49
    
@heavyd proxy server doesn't hide my IP? I have tested with proxy test websites, I don't find my system's IP, I find only proxy IP. so it is highly anonymity. –  niren Nov 20 '13 at 14:52
1  
I proxy server will hide your IP to servers you visit, but it won't prevent someone who does know your IP, or might guess it, from attempting to connect to an open port. You need a firewall for that. –  heavyd Nov 20 '13 at 14:53
    
@heavyd 1 upvote for your quick and exact response. I have Mikrotik router, so there I can write firewall rule to allow only secured remote desktop connection. what would the rule be? –  niren Nov 20 '13 at 14:58
    
How are you planning to secure the connection? LDAP is not a security protocol and there is no way to secure a connection using just LDAP. –  heavyd Nov 20 '13 at 15:00

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.