I've just set up Squid to work as a transparent proxy for my Mikrotik access points. My customers that I have behind one of the access points are able to browse the internet, but the ones from the other AP are not. I think I'm missing something.
I copied the Firewall rules from one to another, so ...
Here is my topology ...
Customers on AP2
|
AP2 (10.0.10.2)
|
AP1 (10.0.1.130) - Switch - Internet Gateway
|
Customers on AP1
So, I have AP2 connected to AP1 through a PtP link and my Squid Proxy (not shown on the illustration above) is connected to the Switch.
I have the hotspot server and MK Webproxy running on the APs so, I'm redirecting all the traffic on the port 80, that comes from the hotspot clients to its internal webproxy.
The MK internal webproxy, I configured to not cache anything and redirect all requests to its parent proxy
The traffic that goes to Squid from AP1 is OK, but the traffic that comes from AP2, the users just receive blank pages and on the Squid Access.log I just see TCP_HIT or TCP_MISS/000 as show below ...
Code: Select all
1243691852.080 3 10.0.10.2 TCP_MISS/000 0 GET http://www.globo.com/Globo.com/home/foto/0,,20927826-EX,00.jpg - DIRECT/w$
1243691852.091 3 10.0.10.2 TCP_MISS/000 0 GET http://www.globo.com/Globo.com/home/foto/0,,20927598-EX,00.jpg - DIRECT/w$
1243691852.206 3 10.0.10.2 TCP_MISS/000 0 GET http://www.globo.com/Globo.com/home/foto/0,,20927532-EX,00.jpg - DIRECT/w$
1243691852.206 3 10.0.10.2 TCP_HIT/000 0 GET http://video.globo.com/FotoShow/0,,20901642,00.jpg - DIRECT/video.globo.co$
1243691852.571 2 10.0.10.2 TCP_HIT/000 0 GET http://video.globo.com/FotoShow/0,,20901618,00.jpg - DIRECT/video.globo.co$
1243691852.780 3 10.0.10.2 TCP_HIT/000 0 GET http://video.globo.com/FotoShow/0,,20901618,00.jpg - DIRECT/video.globo.co$
1243691853.477 311 10.0.1.130 TCP_MISS/303 885 GET http://www.youtube.com/v/isU8lEhyyM4&hl=pt-br - DIRECT/72.14.205.113 t$
1243691854.136 2 10.0.1.130 TCP_HIT/200 10081 GET http://i339.photobucket.com/albums/n474/marvel616-2/template%20616/De$
1243691854.183 915 10.0.1.130 TCP_MISS/200 5656 GET http://googleads.g.doubleclick.net/pagead/ads? - DIRECT/72.14.205.155$