Page 1 of 1
mikrotik with proxy server box in another PC
Posted: Thu May 10, 2007 5:16 pm
by letnan_zoo
Dear MT Users,
i have use mikrotik 2.9.27 for 2 months,
i want ask question about this
1. Is mikrotik can run with proxy server in another PC?
i've configure this for along time but im never get the succed
i use fedora6 for my proxy server, I just wanna ask How to configure NAT in mikrtoik to navigate the cache to the proxyserver from the internet ?
my MT NAT configure is like this
chain=srcnat out-interface=ether1 src-address=192.168.5.0/24
action=masquerade
in my MT there are 3 LANCARDs
eth1 = ISP
eth2 = squid proxy server ( peer to peer with mikrotik)
eth3= LAN
internet--------->eth1 mikrotik eth3 ------------> LAN
eth2
|
|
squid proxy server
Posted: Fri May 11, 2007 6:38 am
by ashish
You can have Transparent Proxy and you can keep between your ISP and Mikrotik in bridge mode.
Second, If you want to connect your Proxy in MT itself, You need to divert all the HTTP Traffic, to your Proxy Port.
Posted: Fri May 11, 2007 2:50 pm
by letnan_zoo
thank u ashish for ur reply, but can u tell me about the configuration of mikrotik to navigate cache to the proxy server , especially in NAT configuration of MT, help me plz ???
Thankz
Posted: Tue May 15, 2007 11:04 am
by flazh
same problem to..
need help...

Posted: Wed May 16, 2007 3:51 am
by skynoc
hi guys
i have already made this before
you can run your web proxy in the mikrotik box ,
/ip web-proxy
- check on the transparent proxy
- in the parent proxy type the ip address of the external squid
- in the parent proxy port type the port of the external squid too
now you have your MT webproxy running on the default port 3128
and redirecting all http request to the external squid , but you should do this to achieve automatic proxy configuration for clients ( the client doesnt need to configure his browser to use a proxy server )
/ip firewall nat add chain=dstnat protocol=tcp dst-port=80 action=redirect to-ports=3128
enjoy
Posted: Wed May 16, 2007 4:51 am
by flazh
hmm.. i have used like skynoc rule
but i think bottleneck on mikrotik proxy..
Posted: Wed May 16, 2007 8:37 pm
by skynoc
i working on this situation now since 3 years ,
the external squid has downlink 5.5 mbit/s dedicated cir and everything is working fine ,
Posted: Thu May 17, 2007 11:54 am
by Ghassan
hi guys
i have already made this before
you can run your web proxy in the mikrotik box ,
/ip web-proxy
- check on the transparent proxy
- in the parent proxy type the ip address of the external squid
- in the parent proxy port type the port of the external squid too
now you have your MT webproxy running on the default port 3128
and redirecting all http request to the external squid , but you should do this to achieve automatic proxy configuration for clients ( the client doesnt need to configure his browser to use a proxy server )
/ip firewall nat add chain=dstnat protocol=tcp dst-port=80 action=redirect to-ports=3128
enjoy
results = powerfull caching ..
Re: mikrotik with proxy server box in another PC
Posted: Thu May 17, 2007 12:25 pm
by ashish
Dear MT Users,
i have use mikrotik 2.9.27 for 2 months,
i want ask question about this
1. Is mikrotik can run with proxy server in another PC?
i've configure this for along time but im never get the succed
i use fedora6 for my proxy server, I just wanna ask How to configure NAT in mikrtoik to navigate the cache to the proxyserver from the internet ?
my MT NAT configure is like this
chain=srcnat out-interface=ether1 src-address=192.168.5.0/24
action=masquerade
in my MT there are 3 LANCARDs
eth1 = ISP
eth2 = squid proxy server ( peer to peer with mikrotik)
eth3= LAN
internet--------->eth1 mikrotik eth3 ------------> LAN
eth2
|
|
squid proxy server
So Finally U want to keep WebProxy in the same MT.
Just Configure MT Web Proxy.
Ex.--
[admin@MASTER] ip web-proxy> pr
enabled: yes
src-address: 0.0.0.0
port: 3128
hostname: "ASHISH"
transparent-proxy: yes
parent-proxy: 0.0.0.0:0
cache-administrator: "
ashish@xyz.com".
max-object-size: 4096KiB
cache-drive: system
max-cache-size: 1024000KiB
max-ram-cache-size: 256000KiB
status: running
reserved-for-cache: 1024000KiB
reserved-for-ram-cache: 256000KiB
[admin@MASTER] ip web-proxy>.
This is in Transparent Mode.
Now, Divert All the HTTP Traffic to your Proxy Port:3128
ex.
1 ;;; Proxy Redirect
chain=dstnat in-interface=lan protocol=tcp dst-port=80
src-address=10.10.10.0/24 action=redirect to-ports=3128.
But you should have the minimum Hardware configuration, which is required to run sucessful PROXY SERVER
Re: mikrotik with proxy server box in another PC
Posted: Wed May 30, 2007 11:37 pm
by samsoft08
skynoc and Ghassan , yes its working , but i found that cache size in MT web-proxy setting is increasing !! what does that mean ? ist still using MT hard disk or what ?