Community discussions

MikroTik App
 
Latif123
just joined
Topic Author
Posts: 16
Joined: Fri Nov 09, 2012 12:24 pm

Allow some users for complete internet access

Fri Nov 09, 2012 12:36 pm

Dear please help me out..

I have configured webproxy in RouterOS 5.18 and blocked some websites successfully , ( facebook,youtube etc...), Now I want to allow some users to access whole internet, I tired through Access list but still they are unable to access the website.
 
User avatar
skillful
Trainer
Trainer
Posts: 552
Joined: Wed Sep 06, 2006 1:42 pm
Location: Abuja, Nigeria
Contact:

Re: Allow some users for complete internet access

Fri Nov 09, 2012 1:33 pm

Place the allow rule above the deny rule.
 
Latif123
just joined
Topic Author
Posts: 16
Joined: Fri Nov 09, 2012 12:24 pm

Re: Allow some users for complete internet access

Fri Nov 09, 2012 1:45 pm

Dear ,

I did the same. but no result.

first I created the deny rule
ip>webproxy>access>
dst.host = www.facebook.com
Action= deny

its work fine for my LAN ( 192.168.2.0/24)

But if i want to give access to single user ( 192.168.2.5)
ip>webproxy>access>
src.address= 192.168.2.5
dst.host= www.facebook.com
Action= Allow

But no result. still user unable to access the website.
 
User avatar
skillful
Trainer
Trainer
Posts: 552
Joined: Wed Sep 06, 2006 1:42 pm
Location: Abuja, Nigeria
Contact:

Re: Allow some users for complete internet access

Fri Nov 09, 2012 3:17 pm

lets see the output of
/ip proxy access print
 
Latif123
just joined
Topic Author
Posts: 16
Joined: Fri Nov 09, 2012 12:24 pm

Re: Allow some users for complete internet access

Sat Nov 10, 2012 8:54 am

Dear ,

I am sorry, I dont understand (/ip proxy access print) command. Could you please guide me in slight simple way ,

I know the /ip proxy access command. but dont now ( print) command.
 
mixig
Member
Member
Posts: 316
Joined: Thu Oct 27, 2011 2:19 pm

Re: Allow some users for complete internet access

Sat Nov 10, 2012 9:46 am

Dear ,

I am sorry, I dont understand (/ip proxy access print) command. Could you please guide me in slight simple way ,

I know the /ip proxy access command. but dont now ( print) command.
You do not have the required permissions to view the files attached to this post.
 
User avatar
skillful
Trainer
Trainer
Posts: 552
Joined: Wed Sep 06, 2006 1:42 pm
Location: Abuja, Nigeria
Contact:

Re: Allow some users for complete internet access

Sat Nov 10, 2012 11:52 am

I cannot see any allow rule in there.

Create the required allow rule and place it ahead of the facebook deny rule.
 
mixig
Member
Member
Posts: 316
Joined: Thu Oct 27, 2011 2:19 pm

Re: Allow some users for complete internet access

Sat Nov 10, 2012 12:38 pm

I cannot see any allow rule in there.

Create the required allow rule and place it ahead of the facebook deny rule.
The image above is just help for Latif123 , it is my web proxy not his :)
 
Latif123
just joined
Topic Author
Posts: 16
Joined: Fri Nov 09, 2012 12:24 pm

Re: Allow some users for complete internet access

Sat Nov 10, 2012 2:21 pm

thanks alot dear for your replies, but my issue is still persist, and have a look on my router with ( ip proxy access print)
You do not have the required permissions to view the files attached to this post.
 
User avatar
skillful
Trainer
Trainer
Posts: 552
Joined: Wed Sep 06, 2006 1:42 pm
Location: Abuja, Nigeria
Contact:

Re: Allow some users for complete internet access

Sat Nov 10, 2012 5:11 pm

Move rule #2 to #0
 
Latif123
just joined
Topic Author
Posts: 16
Joined: Fri Nov 09, 2012 12:24 pm

Re: Allow some users for complete internet access

Mon Nov 12, 2012 1:34 pm

WoW Great Mr.Skilfull and Thanks a lot such a nice help and devotion.
Finally I fix the issue with your help. Many Many thanks again. :)

My last question in this topic :

can we add multiple dst.host in single line or not, like ( facebook.com, google.com, yahoo.com) ?
 
mixig
Member
Member
Posts: 316
Joined: Thu Oct 27, 2011 2:19 pm

Re: Allow some users for complete internet access

Sat Nov 17, 2012 1:25 pm

[admin@MikroTik] > ip proxy access print 
Flags: X - disabled 
 #   DST-PORT                                      DST-HOST                                PATH                                METHOD  ACTION HITS      
 0                                                 www.facebook.com, www.yahoo.com                                                     deny   0         
 1                                                 www.youtube.com                                                                     deny   0         
it does`t put any syntax error when putting multiple dst.host, just try and see is it working...

Who is online

Users browsing this forum: No registered users and 35 guests