hello everyone. I have a client with a proxy server, this limits access to some sites and blocks access to sites not resolved at DNS level. since a renewal of the main router is planned, what rules should I configure? is the dstnat of port 443 enough? or does the proxy section need to be filled in?
Generally HTTPS clients absolutely have to be aware that they’re connecting to proxy server and not directly to target. And that’s done through configuration of clients …
With HTTP it may be possible to do “transparent proxy” with port forwarding.
I did a thorough analysis and from what I understood the proxy in question is ipfire, so it is connected downstream of the router as if it were a firewall. So I believe it is not possible to install ip Fire in a mikrotik container in order to manage everything with the router. Eventually could you recommend some container that runs on mikrotik that can act as a filterdns/proxy? I was trying to guard but it only acts as a DNS filter