Community discussions

MikroTik App
  4. RouterOS
  5. General

Web-Proxy Status Passthru

Post Reply
 
ebernardo
just joined
Topic Author
Posts: 9
Joined: Wed Mar 23, 2016 2:52 am
Location: Brazil
Contact:
Contact ebernardo

Web-Proxy Status Passthru

Wed Mar 23, 2016 2:58 am

Hello, im implementing a X86 RouterOS running in a ESXi environment, it was working until i got a Level 4 license to run a transparent web-proxy.

When i enabled the web proxy it is giving me a status unknow, when i go to the terminal to check it gives status: passthru. This status isn´t documented, what gives this status?

I cannot get it to run.

Thanks!

This is my /ip proxy expor hide-sensitive

Code: Select all
/ip proxy
set cache-administrator=suporte@facuryepalma.com.br enabled=yes \
    max-cache-size=none parent-proxy=0.0.0.0 src-address=192.168.1.1
/ip proxy access
add comment=SERPRO disabled=yes dst-address=161.148.0.0/16
add disabled=yes dst-address=189.9.0.0/18
add disabled=yes dst-address=189.9.64.0/18
add disabled=yes dst-address=189.9.71.0/24
add disabled=yes dst-address=189.9.192.0/18
add disabled=yes dst-address=190.98.146.0/24
add disabled=yes dst-address=200.198.224.0/20
add disabled=yes dst-address=200.198.192.0/19
add disabled=yes dst-address=189.9.128.0/18
add comment=DataPREV disabled=yes dst-address=200.152.32.0/21
add disabled=yes dst-address=200.152.40.0/22
add disabled=yes dst-address=200.152.44.0/22
add comment="Caixa Economica" disabled=yes dst-address=200.201.160.0/22
add disabled=yes dst-address=200.201.164.0/22
add disabled=yes dst-address=200.201.167.0/24
add disabled=yes dst-address=200.201.168.0/21
add comment=Sintegra dst-host=www.sintegra.gov.br
add dst-host=sintegra.sefaz.rs.gov.br
add dst-host=sistemas3.sef.sc.gov.br
add dst-host=www.sintegra.fazenda.pr.gov.br
add dst-host=pfeserv1.fazenda.sp.gov.br
add dst-host=www1.sefaz.ms.gov.br
add dst-host=www.fazenda.rj.gov.br
add dst-host=www.sintegra.es.gov.br
add dst-host=consultasintegra.fazenda.mg.gov.br
add dst-host=www.fazenda.df.gov.br
add dst-host=appasp.sefaz.go.gov.br
add dst-host=www.sefaz.mt.gov.br
add dst-host=www.sefin.ro.gov.br
add dst-host=sefaznet.ac.gov.br
add dst-host=www.suframa.gov.br
add dst-host=www.sefaz.am.gov.br
add dst-host=www.sefaz.rr.gov.br
add dst-host=app.sefa.pa.gov.br
add dst-host=www.sintegra.ap.gov.br
add dst-host=www.sefaz.ma.gov.br
add dst-host=sintegra.sefaz.to.gov.br
add dst-host=web.sintegra.sefaz.pi.gov.br
add dst-host=www.sefaz.ba.gov.br
add dst-host=www.sefaz.se.gov.br
add dst-host=www.sefaz.al.gov.br
add dst-host=www.sintegra.sefaz.pe.gov.br
add dst-host=sintegra.receita.pb.gov.br
add dst-host=www.set.rn.gov.br
add comment=Captcha dst-host=api.recaptcha.net
add dst-host=www.google.com/js
add dst-host=www.google.com/recaptcha/api
add action=deny dst-host=accounts.google.com
add comment=Bancos dst-host=bradesconetempresa.com.br
add dst-host=bradesco.com.br
add dst-host=caixa.gov.br
add dst-host=cmt.caixa.gov.br
add dst-host=conectividade.caixa.gov.br
add dst-host=contadez.cenofisco.com.br
add dst-host=cpo.procempa.com.br
add comment="NF Paulista" disabled=yes dst-address=201.55.62.85
add comment="Simpliss SJBV" disabled=yes dst-address=187.45.245.217
add action=deny disabled=yes dst-address=0.0.0.0/0
Top
 
User avatar
pukkita
Trainer
Trainer
Posts: 3051
Joined: Wed Dec 04, 2013 11:09 am
Location: Spain

Re: Web-Proxy Status Passthru

Wed Mar 23, 2016 11:35 am

Where do you see the status:passthru? haven't seen that even on 6.35rc...

why do you state that isn't working? Are you redirecting HTTP traffic to it?
Top
 
ebernardo
just joined
Topic Author
Posts: 9
Joined: Wed Mar 23, 2016 2:52 am
Location: Brazil
Contact:
Contact ebernardo

Re: Web-Proxy Status Passthru

Wed Mar 23, 2016 3:28 pm

Got it running, to see it in passthru mode you need to set /ip proxy set max-cache-size=none the /ip proxy monitor you will see status passthru.

I figured that out now i got another problem when i set the dst-nat rule to redirect requests from port 80 to 8080 to make the transparente proxy work all navigation stops working.
Top
 
User avatar
pukkita
Trainer
Trainer
Posts: 3051
Joined: Wed Dec 04, 2013 11:09 am
Location: Spain

Re: Web-Proxy Status Passthru

Fri Mar 25, 2016 12:52 pm

Do you see the proxy being hit when that happens?? Have you tried clearing the cache?

If you post a complete export it will be easier.
Top
 
iviyan
just joined
Posts: 7
Joined: Tue Apr 26, 2016 9:44 pm

Re: Web-Proxy Status Passthru

Tue Apr 26, 2016 9:53 pm

I have the same problem. I have tryed with the default configuration, just only to enable proxy but result was the same.

[admin@MikroTik] /ip proxy> print
enabled: yes
src-address: ::
port: 8080
anonymous: no
parent-proxy: ::
parent-proxy-port: 0
cache-administrator: webmaster
max-cache-size: none
max-cache-object-size: 1000KiB
cache-on-disk: no
max-client-connections: 600
max-server-connections: 600
max-fresh-time: 2d
serialize-connections: no
always-from-cache: no
cache-hit-dscp: 4
cache-path: web-proxy

[admin@MikroTik] /ip proxy> monitor
status: passthru
uptime: 13m29s
client-connections: 13
server-connections: 11
requests: 239
total-ram-used: 702KiB
received-from-servers: 37283KiB
sent-to-clients: 37280KiB
hits-sent-to-clients: 0KiB

Board R941-2nd with 6.35 os
Any ideas?
Top
 
ebernardo
just joined
Topic Author
Posts: 9
Joined: Wed Mar 23, 2016 2:52 am
Location: Brazil
Contact:
Contact ebernardo

Re: Web-Proxy Status Passthru

Wed May 04, 2016 11:17 pm

OK, got it working, now i have another problem, i need to access a google captcha trough https but i cant get it working, which is on the following website:

https://www.google.com/recaptcha/
Top
 
Lobogc
just joined
Posts: 3
Joined: Sun Jun 28, 2015 7:06 am

Re: Web-Proxy Status Passthru

Sun Jun 03, 2018 2:19 pm

Hi,

I have the same problem, and the proxy rules (Access) are not working properly in that "passthrough" state ...
On another Mikrotik router the status is "enable" and it's working fine : what was your workaround to make it work again ?
Top
 
Leolo
newbie
Posts: 27
Joined: Wed Aug 21, 2013 7:01 am

Re: Web-Proxy Status Passthru

Sat Apr 25, 2020 5:59 pm

I'm also having this problem. WebProxy Status is "passthrough", and it doesn't work.

Can anyone explain how to get "normal" status? Mikrotik's documentation, is (as always) pure crap and doesn't even mention this strange "passthrough" status.

Why are Mikrotik's docs so bad?
Top
 
AlfaGulf
just joined
Posts: 19
Joined: Sun Sep 16, 2012 10:10 pm

Re: Web-Proxy Status Passthru

Mon Oct 17, 2022 4:14 pm

Has anyone found out how to fix this web proxy passthrough status?
Top
 
pe1chl
Forum Guru
Forum Guru
Posts: 10507
Joined: Mon Jun 08, 2015 12:09 pm

Re: Web-Proxy Status Passthru

Mon Oct 17, 2022 8:44 pm

It is 2022. We have stopped using transparent proxies. They are not compatible with https, only http, and there is almost no http left.
Top
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 3334
Joined: Sat Dec 24, 2016 11:17 am
Location: Magrathean

Re: Web-Proxy Status Passthru

Mon Oct 17, 2022 9:23 pm

MT should just remove the not more needed web proxy function to add space for other cool function :)
Top
 
pe1chl
Forum Guru
Forum Guru
Posts: 10507
Joined: Mon Jun 08, 2015 12:09 pm

Re: Web-Proxy Status Passthru

Mon Oct 17, 2022 9:48 pm

All that crap has to move into a separate package that we can just ignore...
Top
 
brokenmt
just joined
Posts: 3
Joined: Wed Oct 26, 2022 3:13 pm

Re: Web-Proxy Status Passthru

Wed Oct 26, 2022 3:25 pm

I have same issue on hAP lite

My proxy status is passthrough and proxy doesn't work

I don't want use tranparent proxy, I need plain proxy for my reason
Code: Select all
 [admin@mik] /ip/proxy> print
                 enabled: yes
             src-address: ::
                    port: 3128
               anonymous: yes
            parent-proxy: ::
       parent-proxy-port: 0
     cache-administrator: webmaster
          max-cache-size: 2048KiB
   max-cache-object-size: 2048KiB
           cache-on-disk: no
  max-client-connections: 600
  max-server-connections: 600
          max-fresh-time: 3d
   serialize-connections: no
       always-from-cache: no
          cache-hit-dscp: 4
              cache-path: web-proxy
[admin@mik] /ip/proxy> monitor
                 status: passthrough
                 uptime: 28m37s
     client-connections: 0
     server-connections: 0
               requests: 2
         total-ram-used: 0KiB
  received-from-servers: 0KiB
        sent-to-clients: 0KiB
   hits-sent-to-clients: 0KiB

[admin@mik] /ip/proxy> /ip firewall/nat print
Flags: X - disabled, I - invalid; D - dynamic 
 0    ;;; defconf: masquerade
      chain=srcnat action=masquerade out-interface-list=WAN ipsec-policy=out,none
First attempt to use proxy is success, but any other failed. Proxy is silently not working

How I can turn proxy into running state?

I'm already tried different firmwares like 6.47.10, 6.49.7 and 7.6

Please help
Last edited by brokenmt on Wed Oct 26, 2022 3:30 pm, edited 2 times in total.
Top
 
pe1chl
Forum Guru
Forum Guru
Posts: 10507
Joined: Mon Jun 08, 2015 12:09 pm

Re: Web-Proxy Status Passthru

Thu Oct 27, 2022 12:54 pm

Running a proxy on a hAP lite??? Man, please stop being so funny... I need to drink my coffee not spill it!
Top
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 3334
Joined: Sat Dec 24, 2016 11:17 am
Location: Magrathean

Re: Web-Proxy Status Passthru

Thu Oct 27, 2022 6:04 pm

And I am surprised people are posting question in this thread when it clearly posted that Web proxy does not work with https sites and nearly all web site are https.....
Top
 
pe1chl
Forum Guru
Forum Guru
Posts: 10507
Joined: Mon Jun 08, 2015 12:09 pm

Re: Web-Proxy Status Passthru

Thu Oct 27, 2022 6:54 pm

Well, a proxy server DOES work for https sites when it is explicitly configured (not as transparent proxy).
However, no caching will be possible, at most domain-name filtering (not URL filtering).
Still, it does not make sense to try that on a hAP lite... or a MikroTik router in general.
Top
 
brokenmt
just joined
Posts: 3
Joined: Wed Oct 26, 2022 3:13 pm

Re: Web-Proxy Status Passthru

Fri Oct 28, 2022 1:49 pm

In general, web proxy WORKS CORRECTLY in many other mikrotiks with another architectures.
I'm use proxy NOT IT transparent mode.
@Jotne, you might be more observant.
Top
Post Reply

Who is online

Users browsing this forum: gersonfell2, Google [Bot], markatel and 47 guests
  4. RouterOS
  5. General