[SOLVED] need help to configure webproxy

RouterOS General
1

What rules/filters required in order to successfully utilize webproxy?
Here are what I’ve done:

  • enable Web Proxy through Web Proxy Settings window
  • add dstnat to redirect traffic to port 80 to 3128 (default webproxy port)
  • add filters to allow traffic from LAN to router on port 3128 AND allow
    traffic from router to internet on port 80
    but when I tried to surf I always got an error page:
    -------------------- quote begin -------------------------
    ERROR
    The requested URL could not be retrieved

While trying to retrieve the URL: /

The following error was encountered:

Invalid URL
Some aspect of the requested URL is incorrect. Possible problems:

Missing or incorrect access protocol (should be `http://‘’ or similar)
Missing hostname
Illegal double-escape in the URL-Path
Illegal character in hostname; underscores are not allowed
--------------------- quote end -------------------------

Note: I also use masquerade

2

you must check the transparant proxy in the web proxy setting

3

watchoutz, thank u very much…it worked!

4

I just realized that checking that option make my internal IP exposed to the internet.
Is this an expected behaviour ?

5

You have to protect the proxy from being used as spam relay.

  1. ‘ip web-proxy access’ rules protect proxy from unauthorized access.
  2. ‘ip firewall filter’ chain=input protects router from unauthorized access, as well proxy.
6

What I meant was that when I visited sites such showmyip.com, it will display my computer IP (private) instead of my router’s IP (public)

7

First address should be outgoing public address, probably local address will be shown in ‘Browser (User-Agent) Exposed Headers’ menu, but address from local space will be unavailable from outer networks (10.0.0.0, 172.16.0.0, 192.168.0.0), because of NAT (masquerading).

8

Sorry for taking so long to get back…been distracted by other problems.

Sergejs, I’m not sure I follow you.
What do you mean by “First address”?

9

First address, that is shown on showmyip.com.

10

Sergejs, thank you for your assistance

I was carried away by the fact that our former router software (WinRoute) didn’t give the same result with sites like showmyip.com
With WinRoute, only IP of proxy server / internet gateway is shown while with Mikrotik both (local and public) are shown.

11

the ‘x-forwarded-for’ header is not anonymised in web-proxy. winroute conceals this.

12

goldclick, thank you for confirming it.