MikroTik

Posted: **Sun Aug 17, 2008 12:57 am**

Hello everybody
I'm writting to ask, if somebody had the same problem that I will describe:
Well, at the moment, I have a wireless point to point, configurated in bridge mode in ROS 2.9.46, where I transport the Internet to another place where I have two MKT PPPoE Server in ROS 3.11, where I have PPPoE, QOS and WebProxy. The problem appears when I try to optimize the networks, with this change:

The equipment of the PTP does not have exigencies in the processor, so I decided to make in there the QOS. To do its, I have to change my version of ROS to the 3.13. Well, it upgrade excellent, and make the PTP and the QOS without problems.
The problems appears in the PPPoE Servers, I can do everything (ping, DNS,etc), except visit page. So I look that the problems is the proxy. When I disable the NAT roule, that redirect the port 80 to the port of the proxy, I can visit pages, so the problems is the web-proxy!!
I tried taking out the QOS, and nothing. The only way that permit me use the PROXY is the downgrade the version of the PTP equipment. THE ONLY WAY WHERE I CAN HAVE PROXY, IS WHEN I WORKS IN THE PTP WITH VERSION 2.9.X!!!

IS SO STRANGE, ISN'T IT?

The roule that I have to disable is this:

 print 
Flags: X - disabled, I - invalid, D - dynamic 
 0  X ;;; redirect CLIENTES_ACTIVOS port 80 to proxy ports
     chain=dstnat action=redirect to-ports=8080 
     src-address-list=clientes_activos dst-port=80 protocol=tcp

Note: CLIENTES_ACTIVOS is a address-list where are the clients connected to the PPPoE Server.

How to different things can interfere each other??y
Thanks
Rafael Lore

Posted: **Sun Aug 17, 2008 2:08 am**

does

chain=srcnat out-interface=public action=masquerade disabled=no

lays a key role?

Posted: **Tue Aug 19, 2008 4:41 am**

Hello Chupaka
Thanks!!! Always helping me!!! Thanks a lot!!!
Not I don't need that rule because I'm using Public IP, so I make only a ip route and nothing more. Now I have some class C of IP, so I'm trying to implement its.
Another idea?
Thanks
Rafael Lore

Posted: **Tue Aug 19, 2008 12:37 pm**

I don't understand... Did you try this rule, did it help?

WebProxy in v3 may use your internal IP address for public connections - this bug is known (at least upto v3.11) but may be still not solved since early v3.x...

Posted: **Tue Aug 19, 2008 3:15 pm**

Hello
I didn't tried that rule because I'm ussing public IP.
But you said what is my problem

WebProxy in v3 may use your internal IP address for public connections

I didn't know that, so I have to wait
Thanks a lot!!!
Rafael Lore

Posted: **Tue Aug 19, 2008 6:15 pm**

to wait for... what? =)

what did you mean saying 'public IP'? maybe 'public IPs'? so add that rule with 'src-address=router_internal_ip'

Posted: **Tue Aug 19, 2008 7:42 pm**

Hello
To wait that MKT Team solve this problem!! Is bad to think that?

Sorry that I bother you, what I tried to make a Public network, I give to my clients "Public IPs", so I don't have to make NAT. And when you said:

so add that rule with 'src-address=router_internal_ip'

What do you mean? to the redirect rule (for proxy) or to the masquerade (that I don't have)?
Thanks
Rafael Lore

Posted: **Wed Aug 20, 2008 1:32 pm**

omg!..

chain=srcnat out-interface=public src-address=<your_internal_network_here> action=masquerade disabled=no

for example,

chain=srcnat out-interface=public src-address=192.168.0.0/16 action=masquerade disabled=no

and see whether counter on this rule increases - private address range on public interface is bad =)

Posted: **Wed Aug 20, 2008 3:48 pm**

Hello
I think that I confuse when you said:

WebProxy in v3 may use your internal IP address for public connections - this bug is known (at least upto v3.11) but may be still not solved since early v3.x...

I understood that MKT have a mistake or a hole, and won't works with Public IP address. And with the help of friends, I think, where you said "'src-address=router_internal_ip", I have to put this property in th WebProxy. So I've to make an address list with my new Range of Public IP address and insert its in that property That is true?

And again, I won't use private ip address like 192.168.0.0/16, I'll use public IP address like 200.X.X.X
Thanks
Rafael Lore

Posted: **Wed Aug 20, 2008 6:21 pm**

i.e. your router have only one address configured?..

what did you see in Firewall - Connections when you tried to use proxy?

MikroTik

Strange problem with Proxy and PTP

Strange problem with Proxy and PTP

Re: Strange problem with Proxy and PTP

Re: Strange problem with Proxy and PTP

Re: Strange problem with Proxy and PTP

Re: Strange problem with Proxy and PTP

Re: Strange problem with Proxy and PTP

Re: Strange problem with Proxy and PTP

Re: Strange problem with Proxy and PTP

Re: Strange problem with Proxy and PTP

Re: Strange problem with Proxy and PTP