hi everyone
i am just trying to implement squid server in my lab.
this is for my small setup for testing.
i have configured the squid well and my network setup is
ehter1 -internet------mt450g
| |
| |ether5(for lan connectivity
( squid)| |
switch
here main link comes to mt routervoard ehter1 and ether5 is for my lan
and squid is connected to mt router ether4 (here squiid has single lan card ).
[admin@MikroTik] > /ip address print detail
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; wan
address=10.210.2.5/24 network=10.210.2.0 broadcast=10.210.2.255
interface=ether1 actual-interface=ether1
1 ;;; lan
address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255
interface=ether5 actual-interface=ether5
2 ;;; proxy
address=192.168.1.1/24 network=192.168.1.0 broadcast=192.168.1.255
interface=ether4 actual-interface=ether4
######################################################
[admin@MikroTik] > /ip route print detail
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
0 S dst-address=0.0.0.0/0 gateway=192.168.1.2
gateway-status=192.168.1.2 unreachable distance=1 scope=30
target-scope=10 routing-mark=http
1 A S dst-address=0.0.0.0/0 gateway=10.210.2.1
gateway-status=10.210.2.1 reachable ether1 distance=1 scope=30
target-scope=10
2 ADC dst-address=10.210.2.0/24 pref-src=10.210.2.5 gateway=ether1
gateway-status=ether1 reachable distance=0 scope=10
3 ADC dst-address=192.168.0.0/24 pref-src=192.168.0.1 gateway=ether5
gateway-status=ether5 reachable distance=0 scope=10
4 ADC dst-address=192.168.1.0/24 pref-src=192.168.1.1 gateway=ether4
gateway-status=ether4 unreachable distance=0 scope=200
######################################################
/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s
tcp-close-wait-timeout=10s tcp-established-timeout=1d
tcp-fin-wait-timeout=10s tcp-last-ack-timeout=10s
tcp-syn-received-timeout=5s tcp-syn-sent-timeout=5s tcp-syncookie=no
tcp-time-wait-timeout=10s udp-stream-timeout=3m udp-timeout=10s
/ip firewall mangle
add action=mark-routing chain=prerouting comment=“” disabled=no dst-port=80
new-routing-mark=http passthrough=no protocol=tcp src-address-list=squid
/ip firewall nat
add action=masquerade chain=srcnat comment=“for lan masq” disabled=no
out-interface=ether1
add action=masquerade chain=srcnat comment=“” disabled=no dst-port=80
protocol=tcp
add action=dst-nat chain=dstnat comment=“nst nat” disabled=no dst-port=80
protocol=tcp to-addresses=192.168.1.2 to-ports=8080
/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=no ports=5060,5061
set pptp disabled=no
##########################################################
here is my mt routerboard 450g setup. if there is any mistake kindly tell me
note :- all lan client are running in static ip via dhcp server that is configure in mikrotik 450g (simple natting for lan client to browse internet).
with regard
suraj kumar.
india
