Proxy from ISP

nominet · May 17, 2012, 11:06pm

Hi,
I have been given proxy from my ISP. If I configure proxy details under ‘lan setting’ of computer then my internet works. Otherwise it does not.

I want to set the proxy in mikrotik. So, I don’t have to configure it on any computer.

Example: WAN > Proxy > LAN

The proxy address: 213.42.21.101
Proxy port: 8088

Can you please guide me on how I can achieve this situation. I have configured it as a simple router, just want to add proxy to it.

Thanks

Devil · June 3, 2012, 9:09am

I suggest using ‘/ip proxy’ for that matter:

/ip proxy set parent-proxy=213.42.21.101
/ip proxy set parent-proxy-port=8088
/ip proxy set port=8090
/ip proxy set enabled=yes

And then create a dstnat rule to forward all the tcp connections to the webproxy:
(Just to make sure you won’t break your connection with the router, create a dstnat rule first, set the dst-address, to your router address and set the action to accept.)

/ip firewall nat add chain=dstnat protocol=tcp in-interface=*place-your-local-interface-name-here* action=redirect to-ports=8090

nominet · June 16, 2012, 10:57pm

I am bit confused! I don’t get what do you mean by the following

(Just to make sure you won’t break your connection with the router, create a dstnat rule first, set the dst-address, to your router address and set the action to accept)

Actually, I am new to MikroTik. If you can provide an example of code it would be great.

Thanks

Devil · June 18, 2012, 12:14pm

Alright, my bad. looking at it again, this method still works but only for http requests. meaning anything else beyond that (like https), would fail. Although i think transparent proxy for https could have probably worked by looking at the SNI field, this is not the case for mikrotik web proxy at the moment. So if you still want to do that, use this code instead of the above one:

/ip firewall nat add chain=dstnat protocol=tcp dst-port=80 in-interface=*place-your-local-interface-name-here* action=redirect to-ports=8090

one of your probably better options is to use WPAD. there are lots of articles about it, here’s one: http://technet.microsoft.com/library/cc985352.aspx

nominet · July 27, 2012, 11:07am

Devil:

Alright, my bad. looking at it again, this method still works but only for http requests. meaning anything else beyond that (like https), would fail. Although i think transparent proxy for https could have probably worked by looking at the SNI field, this is not the case for mikrotik web proxy at the moment. So if you still want to do that, use this code instead of the above one:
/ip firewall nat add chain=dstnat protocol=tcp dst-port=80 in-interface=*place-your-local-interface-name-here* action=redirect to-ports=8090
one of your probably better options is to use WPAD. there are lots of articles about it, here’s one: http://technet.microsoft.com/library/cc985352.aspx

How I can configure proxy which I have? As an automatic?

Can you please give step by step instruction.