Running Proxy without running NAT on MT

RouterOS General
1

Ok. I know we have covered this, and YES, MT has answered with the same thing, but it DOES NOT WORK!

I have a 1gig MT with 6 eithers.

2 ports are Bridged (one goes to their Cisco 2600 for their Frame Network, one is their local network)
1 port is routed to the internet, but sits behind a PIX firewall, so it is NOT doing NAT, just routing.
It terminates several L2TP connections (routed) and PPTP connections

This is a perfect use for a MT in the enterprise. The main goal is traffic shaping.

What I WANT to do is FORCE all port 80 connections to go though Trend Micros IWSS server. To do this I turn on the Proxy feature: note below:

enabled: yes
port: 8181
parent-proxy: 192.168.1.202:80
maximal-client-connecions: 1000
maximal-server-connectons: 1000

So the proxy is running on port 8181, and it is going to forward to the parent proxy at 192.168.1.202:80, this is the IWSS server.

I then create a NAT rule (again, this box does NOT DO ANY NAT, just routing and bridging).

0 chain=dstnat protocol=tcp dst-port=80 action=redirect to-ports=8181

This should send any tcp port 80 trarffic to port 8181 to the MT proxy.

The Bytes and packets on this rule NEVER CHANGE, so NO DATA is going though it!

Ideas? Options?

Dennis

2

Connection tracking must be enabled.

Is this IWSS server behind the bridge interface?

3

It is on the bridge interface, but that causus another issue as IWSS uses active directory to authencate to gain access, and when I use MT, it is not authorized. hmmm. sux.. but yes, CONNECTION TRACKING is all that it took!

Thanks a bunch, now I think I need to create a routing rule to route outbound port 80 traffic to my IWSS server via routing that way it will be authencated first. hmm k.