3 ms·

I use the same setup (mullvad + container proxy) and can't praise it enough. I just keep a mullvad connection open on my router and only route the proxy IPs th

I use the same setup (mullvad + container proxy) and can't praise it enough. I just keep a mullvad connection open on my router and only route the proxy IPs through it. Great for all kinds of silly GeoIP restrictions, too - in my part of the world, homedepot.com just spits out "access denied", a foodnetwork.com recipe you find in search results just redirects you to the tudiscovery.com homepage, etc.

bogomipz 6y ago
>"I just keep a mullvad connection open on my router and only route the proxy IPs through it.' I'm interested in your setup. Do you configure your router to have a point to point tunnel with Mullvad then? I didn't know this was a thing. Do you then just have a separate container proxy for each GeoIP region you want to access?
- Mandatum 6y ago
  This'll help you: https://mullvad.net/en/help/dd-wrt-routers-and-mullvad-vpn/ https://mullvad.net/en/help/dd-wrt-routers-and-mullvad-vpn/ For Geo-IP, unfortunately unless you have some sort of automation to reconfigure the OpenVPN settings on your router - this will only work with 1 configuration. They may be alluding to using the VPN to connect to another country where they're not getting weird as fuck redirects and shit content. Although just as I wrote that, I'm expecting a dd-wrt/browser addon will probably support this somewhere - or at least as a script on Linux.
- hannibalhorn 6y ago
  I have a Unifi USG, which has a third party wireguard addon, though of course OpenWRT could work just fine. You setup a wireguard tunnel normally, but disable the default routing (on a Unifi, set route-allowed-ip false), and then explicitly add a route for 10.124.0.0/16 through the wireguard interface. The mullvad servers page[1] has socks 5 proxy addresses for all of their servers - assign one to a firefox container and you're all set. No reason you couldn't have a container for each geographic region you want. 1. https://mullvad.net/en/servers/ https://mullvad.net/en/servers/ On a USG the config looks like this: wireguard wg0 { address ***/32 mtu 1420 peer *** { allowed-ips 0.0.0.0/0 endpoint ***:51820 } private-key *** route-allowed-ips false up-command "ip route add 10.64.0.1/32 dev wg0 && ip route add 10.124.0.0/16 dev wg0" }
  - angrais 6y ago
    I'm curious to learn more why you have gone this route compared with the default settings of a standard router? I'm uncertain of the benefit for everyday people.

bogomipz 6y ago

>"I just keep a mullvad connection open on my router and only route the proxy IPs through it.' I'm interested in your setup. Do you configure your router to have a point to point tunnel with Mullvad then? I didn't know this was a thing. Do you then just have a separate container proxy for each GeoIP region you want to access?

Mandatum 6y ago
This'll help you: https://mullvad.net/en/help/dd-wrt-routers-and-mullvad-vpn/ https://mullvad.net/en/help/dd-wrt-routers-and-mullvad-vpn/ For Geo-IP, unfortunately unless you have some sort of automation to reconfigure the OpenVPN settings on your router - this will only work with 1 configuration. They may be alluding to using the VPN to connect to another country where they're not getting weird as fuck redirects and shit content. Although just as I wrote that, I'm expecting a dd-wrt/browser addon will probably support this somewhere - or at least as a script on Linux.
hannibalhorn 6y ago
I have a Unifi USG, which has a third party wireguard addon, though of course OpenWRT could work just fine. You setup a wireguard tunnel normally, but disable the default routing (on a Unifi, set route-allowed-ip false), and then explicitly add a route for 10.124.0.0/16 through the wireguard interface. The mullvad servers page[1] has socks 5 proxy addresses for all of their servers - assign one to a firefox container and you're all set. No reason you couldn't have a container for each geographic region you want. 1. https://mullvad.net/en/servers/ https://mullvad.net/en/servers/ On a USG the config looks like this: wireguard wg0 { address ***/32 mtu 1420 peer *** { allowed-ips 0.0.0.0/0 endpoint ***:51820 } private-key *** route-allowed-ips false up-command "ip route add 10.64.0.1/32 dev wg0 && ip route add 10.124.0.0/16 dev wg0" }
- angrais 6y ago
  I'm curious to learn more why you have gone this route compared with the default settings of a standard router? I'm uncertain of the benefit for everyday people.