how to add proxy server setting?

RouterOS General
1

Hi Guyz,

I have ver. 3.3 installed on pc, i need to know how to add http proxy and port setting on mikrotik server because i have bluecoat web proxy and the internet not working without add http proxy and port in client browser so there’s any way to add the proxy and port to mikrotik server to make the internet working on clients without add proxy setting manually.

Thank you

2 
/ip proxy set parent-proxy=x.x.x.x parent-proxy-port=x

Then you need to set up
http://wiki.mikrotik.com/wiki/How_to_make_transparent_web_proxy

3

The “ether1” Mean Internet port or LAN Port??

Thank you

4

Can’t say which one for lan or Wan, It depend on your configuration.

5

Still not work without configure IE proxy setting :frowning: , there’s another way !!

Thank you

6

Dear Fewi says:

Specific answers require specific questions. When in doubt, post the output of “/ip address print detail”, “/ip route print detail”, “/interface print detail”, “/ip firewall export”, and an accurate network diagram.

Need help? help us to know better about your network

7

Here’s my network setting Specific
1-“/ip address print detail” :-

Flags: X - disabled, I - invalid, D - dynamic
0 address=20.20.20.1/24 network=20.20.20.0 broadcast=20.20.20.255
interface=LAN actual-interface=LAN

1 address=10.10.10.200/23 network=10.10.10.200 broadcast=10.10.10.200
interface=WAN actual-interface=WAN


2-“/ip route print detail”:-


Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
0 A S dst-address=0.0.0.0/0 gateway=10.10.11.254 interface=WAN
gateway-state=reachable distance=1 scope=30 target-scope=10

1 ADC dst-address=10.10.10.0/23 pref-src=10.10.10.200 interface=WAN
distance=0 scope=10

2 ADC dst-address=20.20.20.0/24 pref-src=20.20.20.1 interface=LAN distance=0
scope=10


3-“/interface print detail”:-

Flags: D - dynamic, X - disabled, R - running, S - slave
0 R name=“WAN” type=“ether” mtu=1500

1 R name=“LAN” type=“ether” mtu=1500 l2mtu=1600


4-“/ip firewall export”:-

set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s
tcp-close-wait-timeout=10s tcp-established-timeout=1d
tcp-fin-wait-timeout=10s tcp-last-ack-timeout=10s
tcp-syn-received-timeout=5s tcp-syn-sent-timeout=5s tcp-syncookie=no
tcp-time-wait-timeout=10s udp-stream-timeout=3m udp-timeout=10s
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=
“place hotspot rules here” disabled=yes
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=
“place hotspot rules here” disabled=yes
add action=masquerade chain=srcnat comment=“masquerade hotspot network”
disabled=no src-address=20.20.20.0/24
add action=redirect chain=dstnat comment=“” disabled=no dst-port=80
in-interface=WAN protocol=tcp to-ports=8080
/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=no ports=5060,5061
set pptp disabled=no


Thank you

8

I see that your wan IP (10.10.10.200/23) is not in the same network as Parent Web proxy (20.20.100.100). No problem, because you have 10.10.11.254 as your Default Gateway. But, Does DG(10.10.11.254) know anything about web proxy(20.20.100.100)? I mean does it route to you to Web proxy? test>>> try to ping 20.20.100.100 via Mikrotik ping tool.
If it is OK,

Try this:
instead using

add action=redirect chain=dstnat comment="" disabled=no dst-port=80 \
in-interface=WAN protocol=tcp to-ports=8080

use this:

add action=redirect chain=dstnat comment="" disabled=no dst-port=80 \
src-address="x.x.x.x/x" protocol=tcp to-ports=8080

X= Put IP of clients that need to use proxy like 20.20.20.0/24 (Hotspot users)

Then in Mikrotik Proxy, check whether the clients send request to Mikrotik or not

9

Thank you sadeghrafie

i test to ping 20.20.100.100 “Proxy” from Mikrotick server and it’s reply, no problem

so i will use the below commends:
1-

/ip proxy set parent-proxy=20.20.100.100 parent-proxy-port=8080

2-

/ip firewall nat add action=redirect chain=dstnat comment="" disabled=no dst-port=80 \
src-address="20.20.20.30/24" protocol=tcp to-ports=8080

is that right?? or there’s something i missed


Thnaks

10

Src-address=20.20.20.30/24 is wrong.
You can’t add such subnet When use /24.

If your Hotspot users are 20.20.20.x, use 20.20.20.0/24.

11

did this scenerio work ?, i have the project… please advise