Hotspot + Web Proxy

RouterOS General
1

Hi,
We have installed Hotspot in RB 532. Now i have installed Transparent proxy and deny some sites. But still it opens.

ex. /ip proxy access dst-host=www.hotmail.com action=deny

How can i block some sites using transparent proxy. Also i need a Log, what people are using.

2

Note, that HotSpot uses embedded proxy, you are not able to add access list rules there.
You need to enable separate web-proxy, add NAT rule that will redirect data to proxy, disable ‘transparent-proxy’ option for HotSpot configuration, then access-list rules should work fine.

3

Serjegs,

I have Disabled Transparent Proxy option from Hotspot, But Still IT IS NOT WORKING, What to do.

4

What is your configuration for proxy and for ‘ip firewall nat’ ?

5

[admin@SEMCOM] ip proxy> pr
enabled: yes
src-address: 0.0.0.0
port: 8080
parent-proxy: 0.0.0.0:0
cache-drive: system
cache-administrator: "webmaster"
max-disk-cache-size: none
max-ram-cache-size: none
cache-only-on-disk: no
maximal-client-connections: 1000
maximal-server-connections: 1000
max-object-size: 512KiB
max-fresh-time: 3d

8 ;;; Proxy Redirect-Wi-Fi
chain=dstnat in-interface=Wi-Fi src-address=192.168.192.0/23
protocol=tcp dst-port=80 action=redirect to-ports=8080

Flags: X - disabled
0 ;;; block telnet & spam e-mail relaying
dst-port=23-25 action=deny hits=0

1 dst-host=www.msn.com action=deny hits=0

6

Ashish, place NAT rule to the top of the table.

7

Thank you very much SIr,
Its working Fine NOW. I forgot to give the Priority. Now Finally Help me out to stop downloading .exe and .zip files.

Thank you in advance

ASHISH.