Hi forum,

Is it possible to make transparent proxy in Public IP network ? I mean the client network is getting public ip, How to redirect client http port to proxy server where their is no NAT running ?


Regards

"a4ubd"

if you need to preserve users' IPs - then you should use external Squid proxy with Balabit TProxy feature enabled. on ROS you may only redirect to internal proxy, so websites will see router's IP, not user's one

if you need to preserve users' IPs - then you should use external Squid proxy with Balabit TProxy feature enabled. on ROS you may only redirect to internal proxy, so websites will see router's IP, not user's one

How do Mikrotik user can use that external proxy?

just setup Squid box between MikroTik and Internet

just setup Squid box between MikroTik and Internet

when i do that i can enter mikrotik os inside my network not els

so i cant enter my usermanger from explorer abroud my network

we need another way

sorry, I don't understand you

if you do not need some kind of access - block it! there's none of Squid's business

Hello, how do you tell mikrotik to look at transparrent proxy ?

Ok, I want to setup squid box, from what I understand we put the squid box after MT and Internet connection. So I will have the squid box setup internaly... I have no problem with that, now how do I tell MT to send requests to that squid box? I am using hotspot on my MT.... Can you explain the configuration, I am not familiar with the setup web proxy.

Daniel

you should either setup dst-NAT of 80 port to your Squid, or setup NAT redirect of port 80 to ROS Proxy and set Parent Proxy to your Squid in you ROS Proxy

Is it possible to do dst_NAT in public ip ?

yes, why not. just do not forget to masquerade that traffic for clients with internal addresses