I want to translate this command to mikrotik using winbox/console, but I can’t figure it out, this is the command:
iptables -t nat -A PREROUTING -i eth0 -s ! squid-box -p tcp --dport 80 -j DNAT --to squid-box:3128
iptables -t nat -A POSTROUTING -o eth0 -s local-network -d squid-box -j SNAT --to iptables-box
iptables -A FORWARD -s local-network -d squid-box -i eth0 -o eth0 -p tcp --dport 3128 -j ACCEPT
can anybody help?
Greetings!
I use Shorewall for my Linux firewalls, so I am a bit rusty at IPTABLES. Just to insure we are on the same page, you want port 80 requests to ether1 not from the squid-box DSTNATed (redirected) to a Squid proxy server (localnet?).
It may be easier to answer if you post a brief description of your net, and what you want to do.
i want set up transparant proxy on another box.
example:
LAN — mikrotik_box — proxy_box
in mikrotik_box, i want redirect reques to port 80 to proxy_box port 3128
so, transparent proxy but the proxy in the another box.
The squid box is on the public net? The only Squid proxy I have used was in the router/gateway (Linux x86 box). A simple port redirect was all that was needed. This is out of my realm of experience. Hopefully, someone with that type of proxy server setup will come along…