I've installed the Tomato Shibby firmware on my Asus RT-AC66U and configured a second (virtual) Wifi for my guests so far. In combination with OpenDNS it already (nearly) works like a charm. A last thing I want to do is to prevent guests from using IP proxies in their browser. But I couldn't figure out the best practice scenario so far.
1. Would an ip blocklist be an option? If so, are there any updating services around that update automatically (I couldn't find any lists - maybe because they would be too large?)? I could try to set it up with MoBlock (optware is installed already) then… only if that's advisable?!
2. Is it possible to force routing these http proxies through OpenDNS? As far as I have learned it's not…
3. Blocking ports via access restrictions doesn't seem smart to me, too as there are proxies using port 80.
4. Are there any other alternatives I don't have in mind yet?
I would be very thankful for any hints!