Hi All,
I just configure web proxy on my mikrotik box with the intention to block some websites. The proxy is running, but I discovered that the DHCP clients are not inheriting the proxy setting - it only works when I set up the proxy manually on the web browser.
Can anyone kindly tell me how to make the DHCP clients on my network automatically get proxy configuration? I will very much appreciate.
Austin
Proxy settings aren’t distributed via DHCP.
Just enforce the proxy transparently: http://wiki.mikrotik.com/wiki/How_to_make_transparent_web_proxy#Howto
Hi Fewi/All,
So is there no way to make every connecting PCs web browser to automatically set to the proxy setting. Can’t this be achieved by scripting?
Please I need an urgent help from the GURUs on this forum.
http://en.wikipedia.org/wiki/Proxy_auto-config
What is the problem with transparently proxying everyone as I described, though? There’s no need to even have the client know he’s being proxied.
Hi Fewi,
I am not an expert yet with Mikrotik, just trying few stuff. Here below is my config:
[admin@SWTK BM] > /ip proxy pr
enabled: yes
src-address: 0.0.0.0
port: 8080
parent-proxy: 0.0.0.0
parent-proxy-port: 0
cache-administrator: “webmaster”
max-cache-size: unlimited
cache-on-disk: yes
max-client-connections: 600
max-server-connections: 600
max-fresh-time: 3d
serialize-connections: no
always-from-cache: no
cache-hit-dscp: 4
cache-drive: primary-master
The Mikrotik box is configured to give out DHCP (it is an existing network). The connecting PCs work very well, but for the purpose of blocking some websites that is why we are going down this line. The problem is that all the sites listed for blocking in the proxy access are still working, except i manually configure the proxy on the PCs web browser to point to the proxy and it is not going to be easy to do this and I am unable to make it work dynamically.
Kindly give me a more understandable step by step approach to tacle this problem - kind of paste an existing configuration.
Thank you for your help.
I did.
From that link:
Howto
By default, the web-proxy is listening on port 8080. Therefore we first need to redirect all traffic on port 80 to port 8080 with a DST-NAT firewall rule and ensure that the web-proxy service is enabled and listening to port 8080.
To enable a transparent web proxy on Mikrotik, perform the following:
ip firewall nat add in-interface=ether1 dst-port=80 protocol=tcp action=redirect to-ports=8080 chain=dstnat
ip proxy set enabled=yes port=8080
Pay particular attention to locking down the security of the web-proxy. Read about the /ip proxy access command!
It is also important to consider the size of the cache and all the various other parameters you can change on the web-proxy, however this is outside the scope of this article.