3.13 Web proxy Help

RouterOS General
1

Hi All

Please can someone help me setting up a web proxy to do content filtering, ie. pickup words like porn and etc. and block the site.

I got as far as creating the transparent proxy, redirecting ports 80 to 8080 and it works, i tested it. and also i setup the web proxy:
> ip proxy print
enabled: yes
src-address: 0.0.0.0
port: 8080
parent-proxy: 0.0.0.0
parent-proxy-port: 0
cache-drive: system
cache-administrator: “webmaster”
max-cache-size: none
cache-on-disk: no
max-client-connections: 600
max-server-connections: 600
max-fresh-time: 3d
serialize-connections: no
always-from-cache: no
cache-hit-dscp: 4

But i cant seem to get the content filtering right.

2

can you post your redirection NAT rule?

3

ip firewall nat add in-interface=ether1 dst-port=80
... protocol=tcp action=redirect to-ports=8080 chain=dstnat

The problem is i dont know what to do from there, ie. how to add the keyword to filter, etc.

4

looks fine, how about your access-list rules?

here is a tutorial you might look at
http://wiki.mikrotik.com/wiki/How_to_Block_Websites_%26_Stop_Downloading_Using_Proxy

5

Oh Thanks so much, i have been looking for something like this!

6

ok this makes sense, but what if i want to do thorough content filtering, like we have smoothwalls setup to scan webpages and if they contain certain words that we specify, such as porn etc. it blocks the web site from loading.

7

routeros can only block by parts of the URL