Community discussions

MikroTik App
 
rafa_lore
Member Candidate
Member Candidate
Topic Author
Posts: 121
Joined: Tue Apr 17, 2007 4:57 am
Location: Salta
Contact:

Strange problem with Proxy and PTP

Sun Aug 17, 2008 12:57 am

Hello everybody
I'm writting to ask, if somebody had the same problem that I will describe:
Well, at the moment, I have a wireless point to point, configurated in bridge mode in ROS 2.9.46, where I transport the Internet to another place where I have two MKT PPPoE Server in ROS 3.11, where I have PPPoE, QOS and WebProxy. The problem appears when I try to optimize the networks, with this change:

The equipment of the PTP does not have exigencies in the processor, so I decided to make in there the QOS. To do its, I have to change my version of ROS to the 3.13. Well, it upgrade excellent, and make the PTP and the QOS without problems.
The problems appears in the PPPoE Servers, I can do everything (ping, DNS,etc), except visit page. So I look that the problems is the proxy. When I disable the NAT roule, that redirect the port 80 to the port of the proxy, I can visit pages, so the problems is the web-proxy!!

I tried taking out the QOS, and nothing. The only way that permit me use the PROXY is the downgrade the version of the PTP equipment. THE ONLY WAY WHERE I CAN HAVE PROXY, IS WHEN I WORKS IN THE PTP WITH VERSION 2.9.X!!!

IS SO STRANGE, ISN'T IT? :shock:

The roule that I have to disable is this:
 print 
Flags: X - disabled, I - invalid, D - dynamic 
 0  X ;;; redirect CLIENTES_ACTIVOS port 80 to proxy ports
     chain=dstnat action=redirect to-ports=8080 
     src-address-list=clientes_activos dst-port=80 protocol=tcp 

Note: CLIENTES_ACTIVOS is a address-list where are the clients connected to the PPPoE Server.

How to different things can interfere each other??y
Thanks
Rafael Lore
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8712
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Strange problem with Proxy and PTP

Sun Aug 17, 2008 2:08 am

does
chain=srcnat out-interface=public action=masquerade disabled=no
lays a key role?
 
rafa_lore
Member Candidate
Member Candidate
Topic Author
Posts: 121
Joined: Tue Apr 17, 2007 4:57 am
Location: Salta
Contact:

Re: Strange problem with Proxy and PTP

Tue Aug 19, 2008 4:41 am

Hello Chupaka
Thanks!!! Always helping me!!! Thanks a lot!!!
Not I don't need that rule because I'm using Public IP, so I make only a ip route and nothing more. Now I have some class C of IP, so I'm trying to implement its.
Another idea?
Thanks
Rafael Lore
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8712
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Strange problem with Proxy and PTP

Tue Aug 19, 2008 12:37 pm

I don't understand... Did you try this rule, did it help?

WebProxy in v3 may use your internal IP address for public connections - this bug is known (at least upto v3.11) but may be still not solved since early v3.x...
 
rafa_lore
Member Candidate
Member Candidate
Topic Author
Posts: 121
Joined: Tue Apr 17, 2007 4:57 am
Location: Salta
Contact:

Re: Strange problem with Proxy and PTP

Tue Aug 19, 2008 3:15 pm

Hello
I didn't tried that rule because I'm ussing public IP.
But you said what is my problem
WebProxy in v3 may use your internal IP address for public connections
I didn't know that, so I have to wait
Thanks a lot!!!
Rafael Lore
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8712
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Strange problem with Proxy and PTP

Tue Aug 19, 2008 6:15 pm

to wait for... what? =)

what did you mean saying 'public IP'? maybe 'public IPs'? so add that rule with 'src-address=router_internal_ip'
 
rafa_lore
Member Candidate
Member Candidate
Topic Author
Posts: 121
Joined: Tue Apr 17, 2007 4:57 am
Location: Salta
Contact:

Re: Strange problem with Proxy and PTP

Tue Aug 19, 2008 7:42 pm

Hello
To wait that MKT Team solve this problem!! Is bad to think that? :?
Sorry that I bother you, what I tried to make a Public network, I give to my clients "Public IPs", so I don't have to make NAT. And when you said:
so add that rule with 'src-address=router_internal_ip'
What do you mean? to the redirect rule (for proxy) or to the masquerade (that I don't have)?
Thanks
Rafael Lore
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8712
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Strange problem with Proxy and PTP

Wed Aug 20, 2008 1:32 pm

omg!..
chain=srcnat out-interface=public src-address=<your_internal_network_here> action=masquerade disabled=no
for example,
chain=srcnat out-interface=public src-address=192.168.0.0/16 action=masquerade disabled=no
and see whether counter on this rule increases - private address range on public interface is bad =)
 
rafa_lore
Member Candidate
Member Candidate
Topic Author
Posts: 121
Joined: Tue Apr 17, 2007 4:57 am
Location: Salta
Contact:

Re: Strange problem with Proxy and PTP

Wed Aug 20, 2008 3:48 pm

Hello
I think that I confuse when you said:
WebProxy in v3 may use your internal IP address for public connections - this bug is known (at least upto v3.11) but may be still not solved since early v3.x...
I understood that MKT have a mistake or a hole, and won't works with Public IP address. And with the help of friends, I think, where you said "'src-address=router_internal_ip", I have to put this property in th WebProxy. So I've to make an address list with my new Range of Public IP address and insert its in that property That is true? :(
And again, I won't use private ip address like 192.168.0.0/16, I'll use public IP address like 200.X.X.X
Thanks
Rafael Lore
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8712
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Strange problem with Proxy and PTP

Wed Aug 20, 2008 6:21 pm

i.e. your router have only one address configured?..

what did you see in Firewall - Connections when you tried to use proxy?

Who is online

Users browsing this forum: anav, astac and 36 guests