I configured the web-proxy it’s very good the problem is
if i’m out of my LAN but connected to the internet i can use my internet connection if i set my public ip as the proxy and the port I Set… so
PPL can use my proxy server for anonyme surfing
1 - so i want to Stop the use of the web-proxy and restrict it only for my LAN
2 - also i want to stop the use of the internet in my LAN without proxy
i resolved first prob by adding this rule under ip web-proxy access>
11 src-address=10.20.30.0/24 action=allow \ 10.20.30.0 is my LAN
12 action=deny
You can resolve the second problem by adding a NAT rule in IP/Firewall/nat
/ip firewall nat
add chain=dstnat action=redirect to-ports=3128 in-interface=lan dst-port=80
protocol=tcp comment=“Tranparent Proxy” disabled=no
where “3128” is your proxy port and “lan” is your local interface