Free redirector software for linux

SquidClamAv is a dedicated ClamAV antivirus redirector for Squid. SquidClamAv script can run antivirus checks based on filename regex, content-type regex, and more. It is easy to install and works even with heavy Squid access.

squidGuard is a combined filter, redirector and access controller plugin for Squid.
squidGuard can be used for next activities:
limit the web access for some users to a list of accepted/well known web servers and/or URLs only.
block access to some listed or blacklisted web servers and/or URLs for some users. **)
block access to URLs matching a list of regular expressions or words for some users. **)
enforce the use of domainnames/prohibit the use of IP address in URLs. **)
redirect blocked URLs to an "intelligent" CGI based info page. **)
redirect unregistered user to a registration form.
redirect popular downloads like Netscape, MSIE etc. to local copies.
redirect banners to an empty GIF. **)
have different access rules based on time of day, day of the week, date etc.
have different rules for different user groups.
Enhancements:
- The source block takes a new argument: continue. With this command an ipaddress or user can be configured in serval Sourceblocks. If a client is found but not blocked, squidGuard will continue to search in the next source block, if the continue command is defined. Thanks to Valentin Chopov for the patch

tcpproxy project is a proxy (or tunnel or redirector) for TCP/IP protocols. In standalone mode it waits for incoming connections forwarding them to another machine or starting a local server program.
Several programs with this function or something similiar are around. However, tcpproxys design goal was to let it operate on some kind of firewall.
Main features:
- Extensive logging to syslog,
- Interface based configuration,
- can bind to a particular interface on a multi-homed host,
- sets environment variables before calling a local server program,
- support for external access control programs,
- can be started from inetd or run in standalone mode.
tcpproxy was created with a transparent TCP proxy in mind. When its used to start local server programs (e.g. an FTP server) it can however also work as "port multiplexer" since it requires different configurations for different interfaces (there are no defaults).
Interface based configuration
tcpproxys services are always bound to a certain interface. Suppose you have a multi-homed host (e.g. a firewall) with the IP numbers 192.168.0.1 (part of your LAN) and 10.11.12.13 (connected to the Internet). The configuration
port 119
interface 192.168.0.1
server news.provider.com
forwards then any connection made to your local interface on the NNTP port to the machine news.provider.com. The providers news server appears now to run on your firewall. Furthermore, if you for each port only a single interface where you want to have tcpproxys service, tcpproxy will not even bind to the others. For the example above this means that someone trying to connect to your external interface would only see a closed port.
Now suppose you want to use a second NNTP server from your LAN. You would first configure a second IP number on your internal interface, e.g. 192.168.0.2 and then reconfigure tcpproxy:
port 119
interface 192.168.0.1
server news.provider.com
interface 192.168.0.2
server news.freshmeat.com
Depending on the incoming interface of a client request the connection is forwarded to one of the servers.
In this case the firewalls external interface is opened on port 119 and a port scan would show that theres some kind of service. If however someone connects to the outer interface the connection is immediatly dropped, simply because tcpproxy isnt configured to handle request on the interface 10.11.12.13 and tcpproxy doesnt accept service defaults.
If you like you can extend this configuration to
port 119
interface 192.168.0.1
server news.provider.com
interface 192.168.0.2
server news.freshmeat.com
interface 10.11.12.13
exec /bin/date
for the scanners amusement. But you might also want to write a message to your systems syslog.
Access control
tcpproxy implements access control by calling external, user provided, script, the so called "access control programs" (or in short: acps). I implemented them because I wanted to be able to deny service usage based on anything I like, not just on the clients IP number or its name.

Squidwall is a fast, small, and secure squid redirector. It is written with security in mind.
squidwall enables the administrator to build an easy to use Web interface for controlling user-, host-, or IP-based access to squid. It also does pass-through antivirus scanning with clamav.
Main features:
- user-based accesscontrol to squid (the internet)
- host/ip based accesscontrol to squid
- pass-through antivirus scanning with clamav
- squidwall and squid doesnt need a restart or kill -HUP, if sth. is changed within the acls of squidwall
- the acls are two directories, which have empty files named by these convention:
- +filename -> access ok
- -filename -> access denied
- ?filename -> access ok, but scanned
Enhancements:
- Support for global filtering options, the new url_rewrite_concurrency feature of squid 2.6, and a small memcache which remembers old redirections were added.
- Changing the whole configuration on the fly without restarting squid is now also possible.
- Everything can be changed in /etc/squidwall/control, just like qmail.
- A lot other improvements and fixes were made.