Bypass Http proxy for local network

How can i bypass local network traffic from going into the web proxy, without configuring the browser (IE)?

thanks.

http://wiki.mikrotik.com/wiki/How_to_make_transparent_web_proxy

bypass the proxy?.. just don’t redirect that traffic to the proxy :slight_smile:

it is risky to try and configure all the computers in a network to bypass the proxy for some specific urls.
It’s less risky (and costly) to try and solve it centrally, at the proxy.

i have an concrete example where an local website just doesn’t work if interfet explorer router the traffic to the mikrotik http proxy. bypassing the proxy, everything works. the website is on the local network.

1 website is just 1 example. think of 10+ websites and 100+ computers.

:slight_smile:

help.

so, what’s your current configuration?.. do you use transparent proxy?

i want to use nat and http proxy at the same time.
i’d like to use mainly the proxy (for caching) and nat only as a backup.
if the user suspects that the content is stale, he just unchecks the proxy settings and he should be getting the non-cached content.

there are other scenarios where proxy just isn’t right.







those are answers for another questions… if you have an concrete example - please provide the configuration of that example…

:slight_smile:

i dont use transparent proxy.
example:
mikrotik has lan ip 88.1. It is configured to masquarade local ip’s.
client has ip: 88.254 and wants to browse a website using a name that has been registered in the mikrotik dns as a static entry: name.local.

client enters: http://name.local:port (not port 80, custom port) in the browser. the browser can be configured to use the mikrotik proxy or not.
name.local maps to 88.143 – it’s on the local network.

the client can browse the website only if the browser is not configured to go through the proxy.
if the client goes through the proxy, there are some strange timeout’s :frowning:.

You can’t access the www or www-ssl services while using the web proxy on the same RouterOS device. If you want to use transparent proxy, try this rule to allow only forwarded (ie. non-local) connections through the web proxy (assuming web proxy is set to port 8080):

/ip firewall nat add action=redirect chain=dstnat comment="" disabled=no dst-address-type=!local dst-port=80,8000 protocol=tcp to-ports=8080

and what about another websites? does google work?
on RouterOS, enable webproxy logging and see the log - maybe it will help…

yes, normal proxy works ok. browsing google, etc works ok.
i’ve encountered this scenario many time. i’ve only described only 1 example; the problem does not depend on that particular website or proxy server (i think).

i’m just looking for an elegant solution using routeros.

I still can’t see the reason of timeout. even in case of problem you should see Web Proxy Error page with some info…

what version of ROS do you use?

4.6

Yes i agree that local websites on the local network are not working properly on the proxy server. I am using 4.10

I have parent proxy Squid 2.7 and i want to by pass few ips from that proxy…How can i do that…Any Idea ???

http://wiki.mikrotik.com/wiki/Manual:IP/Proxy#Direct_Access

If parent-proxy property is specified, it is possible to tell proxy server whether to try to pass the request to the parent proxy or to resolve it connecting to the requested server directly.