Community discussions

MikroTik App
 
helium
just joined
Topic Author
Posts: 10
Joined: Wed Oct 26, 2005 4:07 am

web proxy

Tue Jan 10, 2006 12:11 am

Holla.
I'm trying to configure transparent proxy on mikrotik 2.9.6 but problem persist. Should someone can tell me about dest-nat config. Did i put in in-interface LAN/WAN eth.? Manual is pretty confusing...
 
cibernet
Long time Member
Long time Member
Posts: 610
Joined: Fri Jan 28, 2005 7:22 pm
Location: Marcos Juárez, Córdoba, Argentina
Contact:

Wed Jan 11, 2006 1:27 am

Just add this:
add chain=dstnat src-address=(your network) protocol=tcp dst-port=80 action=redirect to-ports=(webproxy port)
 
ajmal
Frequent Visitor
Frequent Visitor
Posts: 57
Joined: Mon Jan 31, 2005 8:38 pm
Location: IN

Thu Jan 12, 2006 10:50 am

FIrst you set webproxy port you may keep it 80 or 8088 etc

if you have defined port 80 add following code-
add chain=dstnat src-address=(your network) protocol=tcp dst-port=80 action=redirect to-ports=80

and if you have defined port 80 add following code-
add chain=dstnat src-address=(your network) protocol=tcp dst-port=80 action=redirect to-ports=8088
 
helium
just joined
Topic Author
Posts: 10
Joined: Wed Oct 26, 2005 4:07 am

Mon Feb 06, 2006 9:21 pm

tnx.
I want to set firewall rule to outbound interface, with that i want to secure webproxy server from trying using a connection (to cut secrvice on lower level).
Something like Chain: INPUT, Protocol: TCP, src Port: 8080, Action:DROP In Interface: PUBLIC
is it ok?
 
cibernet
Long time Member
Long time Member
Posts: 610
Joined: Fri Jan 28, 2005 7:22 pm
Location: Marcos Juárez, Córdoba, Argentina
Contact:

Mon Feb 06, 2006 10:17 pm

tnx.
I want to set firewall rule to outbound interface, with that i want to secure webproxy server from trying using a connection (to cut secrvice on lower level).
Something like Chain: INPUT, Protocol: TCP, src Port: 8080, Action:DROP In Interface: PUBLIC
is it ok?
Use proxy access lists..

Regards
 
helium
just joined
Topic Author
Posts: 10
Joined: Wed Oct 26, 2005 4:07 am

Mon Feb 06, 2006 10:28 pm

Problem is when i using webproxy ACL i can get:

ERROR
The requested URL could not be retrieved

While trying to retrieve the URL: http://www.google.com/

The following error was encountered:

* Access Denied.

Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect.

Your cache administrator is webmaster.

i wont to secure webproxy to doesent get that page!
 
cibernet
Long time Member
Long time Member
Posts: 610
Joined: Fri Jan 28, 2005 7:22 pm
Location: Marcos Juárez, Córdoba, Argentina
Contact:

Mon Feb 06, 2006 10:34 pm

Problem is when i using webproxy ACL i can get:

ERROR
The requested URL could not be retrieved

While trying to retrieve the URL: http://www.google.com/

The following error was encountered:

* Access Denied.

Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect.

Your cache administrator is webmaster.

i wont to secure webproxy to doesent get that page!
Thats because you have to allow acces to your network first...

Regards