I test it and it is really well working.
But I have an problem with yahoo messenger. Cant not initialize a voice or video connection. Chat is OK. I changed connection configuration on messenger's menu, set it to direct connection, http proxy and sock proxy IP of router and port of proxy but no success. Other messengers are OK (MSN, Skype, ...)
Any idea regarding that?
-I also have problem to redirect port 80 TCP to 800 (port of my proxy), dstnat.
All my Router config is:
[admin@MikroTik] > ip route print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 S 0.0.0.0/0 xx.xx.xx.225 1
1 A S 0.0.0.0/0 xx.xx.3.1%WAN2 1
2 A S 0.0.0.0/0 xx.xx.3.1%WAN3 1
3 ADS 0.0.0.0/0 xx.xx.3.1 1
4 S 0.0.0.0/0 xx.xx.xx.225 1
5 DS 0.0.0.0/0 xx.xx.3.1 1
6 S 0.0.0.0/0 xx.xx.3.1 2
7 S 0.0.0.0/0 xx.xx.3.1 3
8 ADC xx.xx.3.1/32 xx.xx.3.207 WAN3 0
WAN2
9 ADC xx.xx.xx.224/27 xx.xx.xx.247 WAN1 0
10 ADC 192.168.12.0/24 192.168.12.210 Local
[admin@MikroTik] /ip firewall> nat pr
Flags: X - disabled, I - invalid, D - dynamic
0 chain=srcnat action=masquerade out-interface=WAN1
1 chain=srcnat action=masquerade out-interface=WAN2
2 chain=srcnat action=masquerade out-interface=WAN3
3 chain=dstnat action=redirect to-ports=800 protocol=tcp
src-address=192.168.0.0/16 in-interface=Local dst-port=80
[admin@MikroTik] /ip firewall> mangle pr
Flags: X - disabled, I - invalid, D - dynamic
0 chain=input action=mark-connection new-connection-mark=pub1_conn
passthrough=yes in-interface=WAN1
1 chain=input action=mark-connection new-connection-mark=pub2_conn
passthrough=yes in-interface=WAN2
2 chain=input action=mark-connection new-connection-mark=pub3_conn
passthrough=yes in-interface=WAN3
3 chain=output action=mark-routing new-routing-mark=to_pub1 passthrough=yes
connection-mark=pub1_conn
4 chain=output action=mark-routing new-routing-mark=to_pub2 passthrough=yes
connection-mark=pub2_conn
5 chain=output action=mark-routing new-routing-mark=to_pub3 passthrough=yes
connection-mark=pub3_conn
6 chain=prerouting action=accept dst-address=xx.xx.xx.0/24 in-interface=Loca>
7 chain=prerouting action=accept dst-address=xx.xx.3.0/24 in-interface=Loca>
8 chain=prerouting action=mark-connection new-connection-mark=pub1_conn
passthrough=yes dst-address-type=!local in-interface=Local
per-connection-classifier=both-addresses:3/0
9 chain=prerouting action=mark-connection new-connection-mark=pub2_conn
passthrough=yes dst-address-type=!local in-interface=Local
per-connection-classifier=both-addresses:3/1
10 chain=prerouting action=mark-connection new-connection-mark=pub3_conn
passthrough=yes dst-address-type=!local in-interface=Local
per-connection-classifier=both-addresses:3/2
11 chain=prerouting action=mark-routing new-routing-mark=to_pub1
passthrough=yes in-interface=Local connection-mark=pub1_conn
12 chain=prerouting action=mark-routing new-routing-mark=to_pub2
passthrough=yes in-interface=Local connection-mark=pub3_conn
13 chain=prerouting action=mark-routing new-routing-mark=to_pub3
passthrough=yes in-interface=Local connection-mark=pub2_conn
14 ;;; HIT TRAFFIC FROM PROXY
chain=output action=mark-packet new-packet-mark=proxy-hit passthrough=no
out-interface=Local dscp=4
15 ;;; UP TRAFFIC
chain=prerouting action=mark-packet new-packet-mark=test-up
passthrough=no in-interface=Local
16 ;;; DOWN-DIRECT CONNECTION
chain=forward action=mark-packet new-packet-mark=test-down passthrough=no
out-interface=Local
17 ;;; DOWN-VIA PROXY
chain=output action=mark-packet new-packet-mark=test-down passthrough=no
out-interface=Local
[admin@MikroTik] /ip proxy> pr
enabled: yes
src-address: 0.0.0.0
port: 800
parent-proxy: 0.0.0.0
parent-proxy-port: 0
cache-administrator: "webmaster"
max-cache-size: 62914560KiB
cache-on-disk: yes
max-client-connections: 60
max-server-connections: 60
max-fresh-time: 2w1d
serialize-connections: yes
always-from-cache: no
cache-hit-dscp: 4
cache-drive: sata1
[admin@MikroTik] /queue tree> pr
Flags: X - disabled, I - invalid
0 name="queue1" parent=global-out packet-mark=test-down limit-at=0
queue=PCQ_download priority=8 max-limit=0 burst-limit=0 burst-threshold=0
burst-time=0s
1 name="queue2" parent=global-in packet-mark=test-up limit-at=0
queue=PCQ_upload priority=8 max-limit=0 burst-limit=0 burst-threshold=0
burst-time=0s
[admin@MikroTik] > queue interface pr
Flags: D - dynamic
INTERFACE QUEUE
0 Local default
1 spare default
2 WAN1 ethernet-default
3 WAN-eth 2 ethernet-default
4 WAN-eth 3 ethernet-default
5 Public4 default
6 WAN2 default
7 WAN3 default
[admin@MikroTik] > queue type pr
0 name="default" kind=pfifo pfifo-limit=50
1 name="ethernet-default" kind=pfifo pfifo-limit=50
2 name="wireless-default" kind=sfq sfq-perturb=5 sfq-allot=1514
3 name="synchronous-default" kind=red red-limit=60 red-min-threshold=10
red-max-threshold=50 red-burst=20 red-avg-packet=1000
4 name="hotspot-default" kind=sfq sfq-perturb=5 sfq-allot=1514
5 name="PCQ_download" kind=pcq pcq-rate=0 pcq-limit=50
pcq-classifier=dst-address pcq-total-limit=3500
6 name="PCQ_upload" kind=pcq pcq-rate=0 pcq-limit=50 pcq-classifier=src-address
pcq-total-limit=3500
7 name="default-small" kind=pfifo pfifo-limit=10
[admin@MikroTik] > queue simple pr
Flags: X - disabled, I - invalid, D - dynamic
0 name="Komp 1" target-addresses=192.168.12.101/32 dst-address=0.0.0.0/0
interface=Local parent=none direction=both priority=5
queue=default/default limit-at=200k/200k max-limit=500k/500k
burst-limit=1500k/1500k burst-threshold=400k/400k burst-time=10s/10s
total-queue=default
1 name="Komp 2" target-addresses=192.168.12.102/32 dst-address=0.0.0.0/0
interface=Local parent=none direction=both priority=5
queue=default/default limit-at=200k/200k max-limit=500k/500k
burst-limit=1500k/1500k burst-threshold=400k/400k burst-time=10s/10s
total-queue=default
2 name="Komp 3" target-addresses=192.168.12.103/32 dst-address=0.0.0.0/0
interface=Local parent=none direction=both priority=5
queue=default/default limit-at=200k/200k max-limit=500k/500k
burst-limit=1500k/1500k burst-threshold=400k/400k burst-time=10s/10s
total-queue=default
[admin@MikroTik] /ip firewall filter> pr
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; WEB Proxy from outside
chain=input action=drop protocol=tcp src-address=0.0.0.0/0
in-interface=WAN1 dst-port=800
1 chain=input action=drop protocol=tcp src-address=0.0.0.0/0
in-interface=WAN2 dst-port=800
2 chain=input action=drop protocol=tcp src-address=0.0.0.0/0
in-interface=WAN3 dst-port=800
3 chain=input action=accept src-address=192.168.12.0/24
4 chain=input action=accept dst-address=192.168.12.0/24
5 chain=forward action=drop src-address=85.117.24.2
6 chain=forward action=drop dst-address=85.117.24.2
7 chain=forward action=reject reject-with=icmp-network-unreachable
protocol=tcp dst-port=25
8 ;;; To WEB proxy
chain=input action=reject reject-with=icmp-network-unreachable
protocol=tcp src-address=!192.168.0.0/16 dst-port=800
9 chain=output action=reject reject-with=icmp-network-unreachable
protocol=tcp dst-address=xx.xx.xx.247 dst-port=800
10 chain=output action=reject reject-with=icmp-network-unreachable
protocol=tcp dst-address=xx.xx.3.43 dst-port=800
11 chain=output action=reject reject-with=icmp-network-unreachable
protocol=tcp dst-address=xx.xx.3.207 dst-port=800
12 chain=input action=reject reject-with=icmp-network-unreachable protocol=tcp
dst-port=445
13 chain=input action=drop src-address=192.168.12.124
14 chain=input action=drop dst-address=192.168.12.124
15 ;;; P2P
chain=forward action=drop p2p=bit-torrent
16 chain=forward action=drop p2p=blubster
17 chain=forward action=drop p2p=direct-connect
18 chain=forward action=drop p2p=edonkey
19 chain=forward action=drop p2p=fasttrack
20 chain=forward action=drop p2p=gnutella
21 chain=forward action=drop p2p=soulseek
22 chain=forward action=drop p2p=warez
23 chain=forward action=drop p2p=winmx
24 chain=forward action=drop protocol=tcp src-port=3074
25 X chain=forward action=drop protocol=udp src-port=3074
26 X ;;; Drop Telnet from Outside
chain=input action=drop protocol=tcp in-interface=WAN 2
dst-port=23
27 X chain=input action=drop protocol=tcp in-interface=WAN 3 dst-port=23
28 X chain=input action=drop protocol=tcp in-interface=WAN1 dst-port=23
29 chain=input action=accept src-address=192.168.12.95-192.168.12.129
30 chain=input action=accept dst-address=192.168.12.95-192.168.12.129
31 chain=input action=accept src-address=192.168.12.20/31
32 chain=input action=accept dst-address=192.168.12.20/31
33 chain=input action=accept src-address=192.168.12.55-192.168.12.59
34 chain=input action=accept dst-address=192.168.12.55-192.168.12.59
35 ;;; Comp Games
chain=input action=accept src-address=192.168.11.100
36 chain=input action=accept dst-address=192.168.11.100
37 chain=input action=drop src-address=192.168.0.0/16
38 chain=input action=drop dst-address=192.168.0.0/16
39 ;;; All Local Network Block
chain=input action=drop src-address=192.168.0.0/16
40 chain=input action=drop dst-address=192.168.0.0/16
thank you for helping me.