a bug in ROS

RouterOS General
1

Dear all

any one can correct me please.

i’ve been trying from a week to redirect youtube to a proxy but failed.
an error in IE that miss spelling or something like that.

I made asquid box that cache youtube videos , it is a proxy ip+port=192.168.10.1:3124
with no GW or DNS.
when a user wants to watch video in youtube, MT must redirect it from 192.168.10.1:3124

here are my settings for firewall:

/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s tcp-close-wait-timeout=10s
tcp-established-timeout=1d tcp-fin-wait-timeout=10s tcp-last-ack-timeout=10s tcp-syn-received-timeout=5s
tcp-syn-sent-timeout=5s tcp-syncookie=no tcp-time-wait-timeout=10s udp-stream-timeout=3m udp-timeout=10s
/ip firewall filter
add action=accept chain=input comment=“” disabled=no
add action=accept chain=output comment=“” disabled=no
/ip firewall nat
add action=accept chain=srcnat comment=“” disabled=no src-address=192.168.10.1
add action=dst-nat chain=dstnat comment=“” disabled=no dst-port=53 protocol=udp to-addresses=2.2.2.10 to-ports=53
add action=dst-nat chain=dstnat comment=“” disabled=no dst-port=53 protocol=udp to-addresses=208.67.222.222 to-ports=53
add action=masquerade chain=srcnat comment=“” disabled=no
add action=dst-nat chain=dstnat comment=“” disabled=no dst-address=208.65.153.238 dst-port=80 protocol=tcp to-addresses=
192.168.10.1 to-ports=3124
add action=dst-nat chain=dstnat comment=“” disabled=no dst-address=208.65.153.251 dst-port=80 protocol=tcp to-addresses=
192.168.10.1 to-ports=3124
add action=dst-nat chain=dstnat comment=“” disabled=no dst-address=208.65.153.253 dst-port=80 protocol=tcp to-addresses=
192.168.10.1 to-ports=3124
add action=dst-nat chain=dstnat comment=“” disabled=no dst-address=208.117.236.69 dst-port=80 protocol=tcp to-addresses=
192.168.10.1 to-ports=3124
add action=dst-nat chain=dstnat comment=“” disabled=no dst-address=69.90.74.20 dst-port=80 protocol=tcp to-addresses=
192.168.10.1 to-ports=3124
add action=redirect chain=dstnat comment=“” disabled=no dst-port=80 protocol=tcp to-ports=8090



It doesn’t work at all.

if anyone find me a solution i will give him the script for youtube via e-mail.
10x in Advanced

2

are your users in 192.168.10.0/24 subnet too? then you should put your proxy on different interface (in bridge, for example)

3

Shouldn’t the dst-nat statements to the squidbox come before the masquerade??

4

hi i did move the masqurade down under the det-nat , but same problem.

lan: 70.70.70.1 pppoe

wan :192.186.1.3424 GW & DNS :192.186.1.1

wan : 192.168.10.1:3128 squid box

both the 192.186.1.34/24 and the 192.168.10.1:3128
are connected to the same nic (wan)

5

Here is the error:

ERROR
The requested URL could not be retrieved

While trying to retrieve the URL: /watch?v=Upn1pXynmbw&feature=rec-HM-r2

The following error was encountered:

Invalid URL
Some aspect of the requested URL is incorrect. Possible problems:

Missing or incorrect access protocol (should be `http://'' or similar)
Missing hostname
Illegal double-escape in the URL-Path
Illegal character in hostname; underscores are not allowed
Your cache administrator is root.


\

Generated Wed, 26 Nov 2008 21:44:30 GMT by proxy (squid/3.0.STABLE2)

as i see that the url is missing the youtube url before the /watch?

does it mean something??

10x again

6

Here is my plan

http://www.clipartof.com/images/free_hosting/large/0180-0811-2615-5637_drawing1.jpg