display the visited WEB sites (URL)

[tajepp]

Dears,

I have hotspot users in our company.
Is there a way to display the visited WEB sites (URL) rather than the destination public IP addresses in the connections of the firewall or even in tourch using the Winbox?

Thanks in advance

[Feklar]

You need to set up a proxy and force all users to use it, depending on the board you have and the size of the network you might be able to get by with the built in proxy, or you will need a dedicated proxy server. The logs of the proxy should contain what URLs were visited.

[tajepp]

@Feklar

You need to set up a proxy and force all users to use it, depending on the board you have and the size of the network you might be able to get by with the built in proxy, or you will need a dedicated proxy server. The logs of the proxy should contain what URLs were visited.

Dear Feklar,

Thanks for your answer, The board I have is RB750 with small memory. can I setup web proxy in it?

Regards,

[Feklar]

Yes you can use proxy on a 750, but I probably wouldn’t use it for more than maybe 20 active users at most. You’ll also have to export your proxy logs to a syslog server for storage and indexing. There is not enough memory available on a 750 to contain a meaningful amount of logs.

To make users use the transparent proxy, under user profile check “use transparent proxy” and set up your proxy.
http://wiki.mikrotik.com/wiki/Manual:IP/Proxy
Be sure to set up firewall filter rules so that the proxy can only be accessed by the LAN of your network. Without those rules, anyone can use your boxes proxy and eat all your bandwidth and take up a ton of CPU time.

You can also do the same thing with a NAT rule:

/ip firewall nat
add action=dstnat protocol=tcp dst-port=80 hotspot=auth dst-address-type=!local action=redirect to-port=8080 in-interface=lan

On a side note, transparent proxy ONLY works with HTTP, so that is all you are going to be able to log. If you want more than that, your only option is a dedicated proxy server that will support what you need.

[speedmax]

@Feklar

Yes you can use proxy on a 750, but I probably wouldn’t use it for more than maybe 20 active users at most. You’ll also have to export your proxy logs to a syslog server for storage and indexing. There is not enough memory available on a 750 to contain a meaningful amount of logs.

To make users use the transparent proxy, under user profile check “use transparent proxy” and set up your proxy.
http://wiki.mikrotik.com/wiki/Manual:IP/Proxy
Be sure to set up firewall filter rules so that the proxy can only be accessed by the LAN of your network. Without those rules, anyone can use your boxes proxy and eat all your bandwidth and take up a ton of CPU time.

You can also do the same thing with a NAT rule:

/ip firewall nat
add action=dstnat protocol=tcp dst-port=80 hotspot=auth dst-address-type=!local action=redirect to-port=8080 in-interface=lan

On a side note, transparent proxy ONLY works with HTTP, so that is all you are going to be able to log. If you want more than that, your only option is a dedicated proxy server that will support what you need.

Thanks a lot for this which I have been searching a lot. Please can you tell full process in detail for setting proxy and viewing DST url instead of ip.

[pe1chl]

@speedmax

Thanks a lot for this which I have been searching a lot. Please can you tell full process in detail for setting proxy and viewing DST url instead of ip.

5 years have passed and this possibility is no longer available.
The world has switched from http to https and it cannot be logged this way.