Community discussions

MikroTik App
 
rajeshrouthu
newbie
Topic Author
Posts: 46
Joined: Sun Jun 22, 2008 10:30 am

masquarade and web proxy issue

Sun Mar 07, 2010 9:03 am

hi friends i got problem with mikrotik , yesterday i configured mikrotik with web proxy and i am redirected to all the traffic to web proxy.ok well n working fine but the issue is i forwaded two ips in nat i.e (10.10.10.2 and 10.10.10.3 ) but 10.10.10.4,5,6...also access internet how its possible..how can i solve this issue

config...

ip address 10.10.10.1/26

ip>nat
chain=srcnat action=masquerade src-address=10.10.10.2
chain=srcnat action=masquerade src-address=10.10.10.3

chain=dstnat action=redirect to-ports=8080 protocol=tcp in-interface=LAN dst-port=80


Regards,

rajesh
 
User avatar
skillful
Trainer
Trainer
Posts: 552
Joined: Wed Sep 06, 2006 1:42 pm
Location: Abuja, Nigeria
Contact:

Re: masquarade and web proxy issue

Sun Mar 07, 2010 10:49 pm

You have to allow access for 10.10.10.2 and 10.10.10.3 while blocking all others in "/ip proxy access"
/ip proxy access
add action=allow comment="" disabled=no src-address=10.10.10.2
add action=allow comment="" disabled=no src-address=10.10.10.3
add action=deny comment="deny all others" disabled=no
 
rajeshrouthu
newbie
Topic Author
Posts: 46
Joined: Sun Jun 22, 2008 10:30 am

Re: masquarade and web proxy issue

Wed Mar 10, 2010 12:54 pm

i have 500 users with different pools how can i add this rule in proxy access ..? tell me any easiest way to block un nat'd ip
 
User avatar
skillful
Trainer
Trainer
Posts: 552
Joined: Wed Sep 06, 2006 1:42 pm
Location: Abuja, Nigeria
Contact:

Re: masquarade and web proxy issue

Thu Mar 11, 2010 11:35 pm

use the appropriate subnet mask to add a block of IPs.
/ip proxy access
add action=allow comment="" disabled=no src-address=10.10.10.0/23
add action=deny comment="deny all others" disabled=no
This rule will allow all IPs in the range 10.10.10.0 - 10.10.11.255

Who is online

Users browsing this forum: No registered users and 46 guests