Does mangle+queue work if web proxy is running?

RouterOS General
1

Hello there…

I have been using MT 2.9.29 for several days. Does my queue work if I use it with web proxy running?

Thank you in advance for a nice reply

Regards
Titok

2

yes, but you have set apropriate mangle and chain accordingly.

3

Bung Valens..,

***My mangle settings are (I try to limit IIX connection which I already list in /ip firewall address-list (around 2000 and more):

[raihan@MikroTik] ip firewall mangle> print
Flags: X - disabled, I - invalid, D - dynamic 
 0   chain=prerouting src-address=192.168.1.3 dst-address-list=iix 
     action=mark-connection new-connection-mark=IIX-KomBack-Con 
     passthrough=yes 

 1   chain=prerouting connection-mark=IIX-KomBack-Con action=mark-packet 
     new-packet-mark=IIX-KomBack-Pack passthrough=yes

***and my queue lists are:

[raihan@MikroTik] queue tree> print
Flags: X - disabled, I - invalid 
 0   name="IIX-KomBack" parent=Dalam packet-mark=IIX-KomBack-Pack limit-at=0 
     queue=default priority=8 max-limit=64000 burst-limit=0 burst-threshold=0 
     burst-time=0s

***These settings would be fine if I am not enable web proxy…, but when I did enabled it, my queue will not work anymore… Anyway my web proxy settings are:

Flags: X - disabled, I - invalid, D - dynamic 
 0   chain=srcnat out-interface=Luar src-address=192.168.1.0/24 
     action=masquerade 

 1   chain=dstnat in-interface=Dalam dst-address=!192.168.1.1 protocol=tcp 
     dst-port=80 action=redirect to-ports=3128

*** and like this:

[raihan@MikroTik] > ip proxy
[raihan@MikroTik] ip proxy> print
                     enabled: yes
                 src-address: 0.0.0.0
                        port: 3128
                parent-proxy: 0.0.0.0:0
                 cache-drive: system
         cache-administrator: "webmaster"
         max-disk-cache-size: 17273000KiB
          max-ram-cache-size: 35606KiB
          cache-only-on-disk: yes
  maximal-client-connections: 1000
  maximal-server-connections: 1000
             max-object-size: 51200KiB
              max-fresh-time: 3d

If those web proxy settings are enabled, it seems my queue doesn’t work anymore, but if they were disabled, my queue is working… What’s wrong here??

Thank you in advance for any help…

Regards,
Tito

4

@ boss Valens

it’s seem not work for me too since 2.7.14

@bung Titok

add more MT box running in transparent shaping :smiling_imp:

5

try this code
Code:
Flags: X - disabled, I - invalid, D - dynamic
0 chain=srcnat out-interface=Luar src-address=192.168.1.0/24
action=masquerade

1 chain=dstnat in-interface=Dalam dst-address=!192.168.1.0/24 protocol=tcp dst-port=80 action=redirect to-ports=3128

note: !192.168.1.0/24

6

this will be one of the unsolved issues in MT , we are waiting for a new version of the manual to put some official examples , coz we see many ways made by users , and there is no proofing ..

note : even in MUM they ignore this issue !!! :unamused:

7

http://wiki.mikrotik.com/wiki/Queue_with_Masquerading_and_Internal_Web-Proxy

8

Valens,

Nice one! This issue has bugged me for quite a while. will give this a shot!

Sonny.