Community discussions

MikroTik App
 
cata02
Member Candidate
Member Candidate
Topic Author
Posts: 116
Joined: Fri Mar 05, 2010 8:58 am

Bypass Http proxy for local network

Sat Apr 24, 2010 11:04 am

How can i bypass local network traffic from going into the web proxy, without configuring the browser (IE)?

thanks.
 
kazanova
Member
Member
Posts: 406
Joined: Tue Sep 06, 2005 11:52 am

Re: Bypass Http proxy for local network

Sun Apr 25, 2010 6:41 pm

 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Bypass Http proxy for local network

Mon Apr 26, 2010 4:22 am

bypass the proxy?.. just don't redirect that traffic to the proxy :)
 
cata02
Member Candidate
Member Candidate
Topic Author
Posts: 116
Joined: Fri Mar 05, 2010 8:58 am

Re: Bypass Http proxy for local network

Mon Apr 26, 2010 5:42 am

it is risky to try and configure all the computers in a network to bypass the proxy for some specific urls.
It's less risky (and costly) to try and solve it centrally, at the proxy.

i have an concrete example where an local website just doesn't work if interfet explorer router the traffic to the mikrotik http proxy. bypassing the proxy, everything works. the website is on the local network.

1 website is just 1 example. think of 10+ websites and 100+ computers.

:)

help.
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Bypass Http proxy for local network

Mon Apr 26, 2010 5:59 am

so, what's your current configuration?.. do you use transparent proxy?
 
cata02
Member Candidate
Member Candidate
Topic Author
Posts: 116
Joined: Fri Mar 05, 2010 8:58 am

Re: Bypass Http proxy for local network

Mon Apr 26, 2010 6:23 am

i want to use nat and http proxy at the same time.
i'd like to use mainly the proxy (for caching) and nat only as a backup.
if the user suspects that the content is stale, he just unchecks the proxy settings and he should be getting the non-cached content.

there are other scenarios where proxy just isn't right.
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Bypass Http proxy for local network

Mon Apr 26, 2010 6:47 am

what's ... ?
do you ... ?
i want
i'd like
those are answers for another questions... if you have an concrete example - please provide the configuration of that example...
 
cata02
Member Candidate
Member Candidate
Topic Author
Posts: 116
Joined: Fri Mar 05, 2010 8:58 am

Re: Bypass Http proxy for local network

Mon Apr 26, 2010 8:40 am

:)

i dont use transparent proxy.
example:
mikrotik has lan ip 88.1. It is configured to masquarade local ip's.
client has ip: 88.254 and wants to browse a website using a name that has been registered in the mikrotik dns as a static entry: name.local.

client enters: http://name.local:port (not port 80, custom port) in the browser. the browser can be configured to use the mikrotik proxy or not.
name.local maps to 88.143 -- it's on the local network.

the client can browse the website only if the browser is not configured to go through the proxy.
if the client goes through the proxy, there are some strange timeout's :(.
 
dssmiktik
Forum Veteran
Forum Veteran
Posts: 732
Joined: Fri Aug 17, 2007 8:42 am

Re: Bypass Http proxy for local network

Mon Apr 26, 2010 9:06 am

You can't access the www or www-ssl services while using the web proxy on the same RouterOS device. If you want to use transparent proxy, try this rule to allow only forwarded (ie. non-local) connections through the web proxy (assuming web proxy is set to port 8080):
/ip firewall nat add action=redirect chain=dstnat comment="" disabled=no dst-address-type=!local dst-port=80,8000 protocol=tcp to-ports=8080
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Bypass Http proxy for local network

Mon Apr 26, 2010 5:01 pm

the client can browse the website only if the browser is not configured to go through the proxy.
if the client goes through the proxy, there are some strange timeout's :(.
and what about another websites? does google work?
on RouterOS, enable webproxy logging and see the log - maybe it will help...
 
cata02
Member Candidate
Member Candidate
Topic Author
Posts: 116
Joined: Fri Mar 05, 2010 8:58 am

Re: Bypass Http proxy for local network

Mon Apr 26, 2010 7:03 pm

yes, normal proxy works ok. browsing google, etc works ok.
i've encountered this scenario many time. i've only described only 1 example; the problem does not depend on that particular website or proxy server (i think).

i'm just looking for an elegant solution using routeros.
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Bypass Http proxy for local network

Tue Apr 27, 2010 4:27 pm

I still can't see the reason of timeout. even in case of problem you should see Web Proxy Error page with some info...

what version of ROS do you use?
 
cata02
Member Candidate
Member Candidate
Topic Author
Posts: 116
Joined: Fri Mar 05, 2010 8:58 am

Re: Bypass Http proxy for local network

Tue Apr 27, 2010 7:48 pm

4.6
 
jeswanth
just joined
Posts: 8
Joined: Thu Aug 12, 2010 10:35 pm

Re: Bypass Http proxy for local network

Fri Aug 13, 2010 9:54 pm

Yes i agree that local websites on the local network are not working properly on the proxy server. I am using 4.10
 
User avatar
anuphalo2010
just joined
Posts: 1
Joined: Fri Aug 12, 2011 2:11 pm

Re: Bypass Http proxy for local network

Fri Aug 12, 2011 2:54 pm

I have parent proxy Squid 2.7 and i want to by pass few ips from that proxy.........How can i do that.....Any Idea ?????????
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Bypass Http proxy for local network

Tue Aug 16, 2011 5:18 pm

http://wiki.mikrotik.com/wiki/Manual:IP ... ect_Access
If parent-proxy property is specified, it is possible to tell proxy server whether to try to pass the request to the parent proxy or to resolve it connecting to the requested server directly.

Who is online

Users browsing this forum: No registered users and 20 guests