Page 1 of 1

PPPoE Server + Proxy

Posted: Sun Nov 18, 2007 1:54 am
by rafa_lore
Hello everybody!!
I'm making a PPPoE server with proxy, the client can connect without problem to the pppoe server and can use internet perfectly. But I want to use the proxy and it is imposible.
In IP FIREWALL NAT I have this rules:
[admin@MikroTik] /ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=srcnat action=masquerade out-interface=dedicado
1 ;;; Redirecciono el puerto 80 al 3128 para hacer el Web Proxy
chain=dstnat action=redirect to-ports=3128 in-interface=interno dst-port=80 protocol=tcp

Well, the second rule doesn't work, I have the proxy enable!! :(
I tried, to use the router without PPPoE server, only whit a DHCP server, and in this way the proxy work perfectly!!! But I connect via pppoe and NOT!!! :?
Can someone say me why? and how I've to configurate the router to make the proxy work, please!!
Thank
Rafael Loré

Re: PPPoE Server + Proxy

Posted: Sun Nov 18, 2007 3:43 am
by Chupaka
misconfiguration is in "in-interface=interno": packets are received on pppoe interfaces, not interno. use "in-interface=!dedicado"

Re: PPPoE Server + Proxy

Posted: Sun Nov 18, 2007 5:45 pm
by rafa_lore
Thank you very much!!!
this afternoom I'll try this, I think thas is my problem
Thank
Rafael Lore

Re: PPPoE Server + Proxy

Posted: Sun Nov 18, 2007 6:04 pm
by rafa_lore
Hello I couldn't wait this afternoom. I tried what you say Chupaka and is OK, it worked, Thank
But I have another question!! What happend if I have 3 ethernet card, where the configuration is this:
1 - DEDICADO, where I have my principal access to internet
2 - ADSL, where I have an access of xDSL to works only with P2P
3 - INTERNO, where the PPPoE server is working
The question is that if I use "in-interface=!dedicado", like you say and work, the interface ADSL, will crash with it, isn't it?
Thank you
Rafael Lore

Re: PPPoE Server + Proxy

Posted: Mon Nov 19, 2007 12:23 am
by Chupaka
just remove filtering by interface from the NAT fule, and then drop all packets to port 80 from interfaces adsl and dedicado. it will work =)

if you want better solution, mark all outgoing connections to port 80, and then drop all incoming connections not marked on interfaces adsl and dedicado - you will secure your router from accesing from Internet =)