Community discussions

MikroTik App
 
flexus
just joined
Topic Author
Posts: 22
Joined: Wed Feb 16, 2011 11:35 pm
Location: Ukraine

Forward traffic to pptp client connect ?

Thu Aug 18, 2011 4:28 pm

Hi, i have RB750G with RouterOS 4.17.
I have two ppp client connections active. One of them is default, so all my internet traffic is going by them.
How can i do a proxy, where all traffic will be going only by second pptp ? For example, when i typing in some app proxy 192.168.88.1:3128, traffic will be going by that second pptp interface. It's in NAT of Filters, but i dont find how can i forward to another interface.
Thank you. Native language is not english, so, maybe will be some troubles to take a sense of writing by me :D
 
fewi
Forum Guru
Forum Guru
Posts: 7717
Joined: Tue Aug 11, 2009 3:19 am

Re: Forward traffic to pptp client connect ?

Thu Aug 18, 2011 4:35 pm

http://wiki.mikrotik.com/wiki/Manual:IP/Proxy
src-address (Ip4 | Ip6; Default: 0.0.0.0) Proxy will use specified address when connecting to parent proxy or web site. If set to 0.0.0.0 then appropriate IP address will be taken from routing table.
First make a loopback interface by creating a new bridge interface, not adding any ports to it, and giving it an IP address. You can now reach the router via that IP.
Then set that IP as the src-address of the proxy, and do not ever use it for anything else.
Then make mangle rules in the "output" chain that set a routing mark for traffic sourced from that loopback IP address, and finally make a route for 0.0.0.0/0 and that routing mark to go out the second PPTP interface, and ensure the distance of that route is lower than your other default routes.

The idea is to get the proxy to use IP patterns that you can recognize in firewall rules, and to then use policy routing to force only proxy traffic out a particular WAN interface.
 
flexus
just joined
Topic Author
Posts: 22
Joined: Wed Feb 16, 2011 11:35 pm
Location: Ukraine

Re: Forward traffic to pptp client connect ?

Thu Aug 18, 2011 5:30 pm

All is clear, but not with routing mark.
Can you explain it more detailed how can i do this right, please ?
 
fewi
Forum Guru
Forum Guru
Posts: 7717
Joined: Tue Aug 11, 2009 3:19 am

Re: Forward traffic to pptp client connect ?

Thu Aug 18, 2011 5:33 pm

/interface bridge
add name=loopback
/ip address
add interface=loopback address=10.255.255.255/32
/ip proxy 
set src-address=10.255.255.255
/ip firewall mangle
add chain=output src-address=10.255.255.255 action=mark-routing new-routing-mark=proxy-traffic
/ip route
add dst-address=0.0.0.0/0 routing-mark=proxy-traffic gateway=1.1.1.1
Substitute as required. Make sure the distance for existing routes is higher than the new one added above.
 
flexus
just joined
Topic Author
Posts: 22
Joined: Wed Feb 16, 2011 11:35 pm
Location: Ukraine

Re: Forward traffic to pptp client connect ?

Thu Aug 18, 2011 7:10 pm

Thank you!

Who is online

Users browsing this forum: Bing [Bot], KpuCko, Valerio5000 and 111 guests