proxy for https connecton

RouterOS General
1

hi…
i am using mikrotik router board750GL
currently i have some problem on web proxy, i configured web proxy, and i access denied few webpages and download extensoins.
for example:
facebook.com = deny
twitter.com = deny
*.avi = deny
*.mpeg - deny

but when the clients use https://facebook.com then facebook page is smoothly run
so how do i block https connection also from mikrotik router webproxy.

anybody help please…

2

You CAN NOT DO THIS.

Web-Proxy is for HTTP ONLY!!! The Web-Proxy is NOT for HTTPS!!!

You need a seperate external proxy like squid if you want to proxy https.

3

You CAN NOT DO THIS.

Web-Proxy is for HTTP ONLY!!! The Web-Proxy is NOT for HTTPS!!!

You need a seperate external proxy like squid if you want to proxy https.

Actually in wiki says: “This service performs proxying of HTTP and HTTP-proxy (for FTP, HTTP and HTTPS protocols) requests, so I’m interested too…”: http://wiki.mikrotik.com/wiki/Manual:IP/Proxy

4

I also think that you can not use webproxy for https connections.
But if you want to try you will need to redirect https connections to your webproxy:

/ip firewll nat
add chain=dstnat protocol=tcp dst-port=443 action=redirect to-ports=8080
5

I also think that (actually, I never could). I’m just curious for that post in the wiki…

6

Webproxy with HTTPS has been discussed here many times before. I think the wiki has a mistake.

7

is there another way to solve this?

8

I think it is against the idea of https it self. https are secure connections, and wouldn’t be apropriate for any to cache sensitive pages (except for NSA :slight_smile: )