masquarade and web proxy issue

RouterOS The User Manager
1

hi friends i got problem with mikrotik , yesterday i configured mikrotik with web proxy and i am redirected to all the traffic to web proxy.ok well n working fine but the issue is i forwaded two ips in nat i.e (10.10.10.2 and 10.10.10.3 ) but 10.10.10.4,5,6…also access internet how its possible..how can i solve this issue

config…

ip address 10.10.10.1/26

ip>nat
chain=srcnat action=masquerade src-address=10.10.10.2
chain=srcnat action=masquerade src-address=10.10.10.3

chain=dstnat action=redirect to-ports=8080 protocol=tcp in-interface=LAN dst-port=80


Regards,

rajesh

2

You have to allow access for 10.10.10.2 and 10.10.10.3 while blocking all others in “/ip proxy access”

/ip proxy access
add action=allow comment="" disabled=no src-address=10.10.10.2
add action=allow comment="" disabled=no src-address=10.10.10.3
add action=deny comment="deny all others" disabled=no
3

i have 500 users with different pools how can i add this rule in proxy access ..? tell me any easiest way to block un nat’d ip

4

use the appropriate subnet mask to add a block of IPs.

/ip proxy access
add action=allow comment="" disabled=no src-address=10.10.10.0/23
add action=deny comment="deny all others" disabled=no

This rule will allow all IPs in the range 10.10.10.0 - 10.10.11.255