Sahaj.blogs
16 Mar 2026 · Projects

Built this: SentinelProxy Suite

A locally hosted HTTPS proxy and DNS server with SQLite-backed blocklists, heuristic filtering, a live WebSocket dashboard and a firewall kill switch.

On 16 March 2026 I started SentinelProxy Suite, a local network-control system written mainly in JavaScript (Node.js). The repo now has 30 commits.

What it does

From the README:

  • HTTPS proxy on port 5309 that intercepts and routes traffic, with certificate generation through node-forge.
  • DNS server on port 53 that refuses known malicious domains before a connection is made.
  • Dynamic blocklists loaded into an indexed SQLite3 database for low-latency lookups.
  • Heuristic filters: suspicious TLDs (e.g. .zip, .mov, .top, .xyz) and tracker substrings (ads, track, pixel, analytics).
  • Live dashboard over HTTPS with Express and socket.io, streaming query logs in real time.
  • System hooks: points the OS DNS and proxy at 127.0.0.1 while running, restores the settings on shutdown, and manages Windows Firewall rules, including a kill switch that blocks outgoing traffic if the proxy goes down.

Stack

Node.js, dns2, http-proxy, socket.io, SQLite3 and node-forge. Windows is recommended because the kill switch uses netsh firewall commands.

#networking#security#nodejs

Sources

  1. SahajIVVIX-1/SentinelProxy-Suite (GitHub) — GitHub
  2. First commit 5f30c3b — GitHub

This is a summary written from the linked public sources. Figures and numbers are as reported there.