Background:
I'm running LEDE/ OpenWRT on a Linksys WRT1900ACS router. Adblocking and privoxy are set up and work great. I also use the router as a SOCKS5 proxy for safer browsing remotely from networks I tend not to trust (which is really every other network--employer/ oil change place/ retail stores/ coffee shop/ hotel/ relatives/ friends). The SOCKS5 proxy works via PKI and my terminal emulator (ConnectBot / VX ConnectBot/ PuTTy). I believe my SOCKS5 proxy sessions in my phone's browser don't gain the benefit of adblocking and privoxy as I seem to almost get a DMZ experience vs a LAN experience. I've confirmed that suspicion by tailing privoxy logs and by trying to hit its management web page http://p.p and http://config.privoxy.org (both of which work from the LAN and take me to the management page where I can toggle the service or check for applicable actions on any domain). I know my browsing is really going through the router at the house (since public IP seen by web servers is my home ISP rather than Sprint cellluar), but I don't see adblocking and privoxy benefits that I had hoped to. It's still a net gain as I'm using the router's McAfee and Komodo DNS, and the networks I connect from only see my SSH session out on port 443 to my dynamic DNS hostname, with all browser DNS resolution inside that tunnel (unseen).
Question:
Basically my question is, since the following iptables rule is how I succeeded in forcing LAN traffic through my privoxy service (intercepting proxy), should I expect a similar rule will be necessary to force incoming SOCKS5 proxied traffic (me anywhere but home) through privoxy on its listening port? Note that before this rule was added, manual configuration of browser SOCSK5 proxy had to be set for LAN clients.
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 j REDIRECT --to-ports 8080
Perhaps the same rule as above with eth0 changed to my router's WAN interface?
Should I instead try to handle this by a telnet inside my SSH session to the listening port of the privoxy service? Or a command to be run after my PKI authenticated SSH session succeeds?
I would sure appreciate any advice.
