Community discussions

MikroTik App
 
user3k
just joined
Topic Author
Posts: 3
Joined: Sat Apr 16, 2011 4:15 pm

help with redirecting proxy

Thu Oct 13, 2011 8:19 pm

I'm trying to redirect traffic to a external squid proxy.
This image illustrate my config (the image is from another user, but my config is the same): http://forum.mikrotik.com/download/file.php?id=5892

The rule used:
/ip firewall nat add chain=dstnat src-address=10.10.10.0/24 protocol=tcp dst-port=80 action=dst-nat to-addresses=10.10.10.2 to-ports=3128

If i configure the proxy direct in the browser, all works. But with the redirect rule nothing happen, the connection don't give any error. And nothing is logged in the squid log, is like the connection never hit the proxy itself.


My squid.conf

http_port 3128 transparent
visible_hostname proxy

cache_mem 64 MB
maximum_object_size_in_memory 64 KB
maximum_object_size 512 MB
minimum_object_size 0 KB
cache_swap_low 90
cache_swap_high 95
cache_dir ufs /var/spool/squid 2048 16 256
cache_access_log /var/log/squid/access.log
refresh_pattern ^ftp: 15 20% 2280
refresh_pattern ^gopher: 15 0% 2280
refresh_pattern . 15 20% 2280

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 21 80 443 563 70 210 280 488 59 777 901 1025-65535
acl purge method PURGE
acl CONNECT method CONNECT

http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports

http_access allow localhost
http_access allow all
 
Feklar
Forum Guru
Forum Guru
Posts: 1724
Joined: Tue Dec 01, 2009 11:46 pm

Re: help with redirecting proxy

Thu Oct 13, 2011 8:22 pm

It would be much much better to set up the squid on a different subnet on a different routed interface. Makes things cleaner, easier, and more secure for you.

Based off of the information you posted, and if you want to keep your current configuration, follow this guide:
http://wiki.mikrotik.com/wiki/Hairpin_NAT

Who is online

Users browsing this forum: GoogleOther [Bot], Majestic-12 [Bot], mbezuidenhout, noyo, pmcsill, tnperron and 195 guests