Strange IP on webporxy loggin

RouterOS General
1

Hi guys.
I activated the web proxy and started to log the connections, everything is fine except by the fact there is some strange public IP’s that is being logging by the mikrotik.

here are some examples:
web-proxy,account 146.185.29.108 GET http://www.youtube.com/get_video_info?video_id=6J0Cl1RjJlQ&el=info&ps=default&hl=en_US&asv=3&sts=16104 action=allow cache=MISS 2014-06-28 09:11
web-proxy,account 116.213.72.12 CONNECT passport.china-sss.com:443 action=allow cache=MISS 2014-06-28 09:11
web-proxy,account 116.213.72.12 CONNECT passport.china-sss.com:443 action=allow cache=MISS 2014-06-28 09:12


tnx…
2014-06-28.log (408 KB)

2

Are you blocking proxy requests from the internet? If not, then that is normal. Anyone would be able to use your proxy.

3

Sorry man, I’m beginner on mikrotik, so, how can I block requests from internet??
thanks

4

You should be blocking requests from the WAN interface from at least unknown/untrusted ip addresses, otherwise you are asking to get hacked. This will help you add the other rules you need to secure your router.
http://wiki.mikrotik.com/wiki/Securing_your_router

5

thanks for the reply, I have an other problem, this one is with scripts. I created an script to find such mac’s on the lease and get its IP, so, when I put the script on the terminal It works fine, but in the script option, It doesn’t execute, just the first line of it is executed.
here is the script:
/ip firewall address-list remove number=[find list=CELULAR];
/ip firewall address-list add list=CELULAR address=[/ip dhcp-server lease get number=[find mac-address=FC:92:3B:EC:99:88] address];
/ip firewall address-list add list=CELULAR address=[/ip dhcp-server lease get number=[find mac-address=A4:77:60:47:16:6C] address];
/ip firewall address-list add list=CELULAR address=[/ip dhcp-server lease get number=[find mac-address=C8:D1:0B:DF:9F:9A] address];
/ip firewall address-list add list=CELULAR address=[/ip dhcp-server lease get number=[find mac-address=CC:07:AB:0B:69:A9] address];
/ip firewall address-list add list=CELULAR address=[/ip dhcp-server lease get number=[find mac-address=24:C6:96:7E:EA:8A] address];
/ip firewall address-list add list=CELULAR address=[/ip dhcp-server lease get number=[find mac-address=10:D5:42:11:C4:AB] address];
/ip firewall address-list add list=CELULAR address=[/ip dhcp-server lease get number=[find mac-address=F8:E0:79:FA:7E:F1] address];
/ip firewall address-list add list=CELULAR address=[/ip dhcp-server lease get number=[find mac-address=68:76:4F:10:18:1B] address];
/ip firewall address-list add list=CELULAR address=[/ip dhcp-server lease get number=[find mac-address=1C:AF:05:C3:EB:06] address];
/ip firewall address-list add list=CELULAR address=[/ip dhcp-server lease get number=[find mac-address=60:BE:B5:3E:A0:F3] address];
/ip firewall address-list add list=CELULAR address=[/ip dhcp-server lease get number=[find mac-address=CC:FA:00:A1:45:B5] address];
/ip firewall address-list add list=CELULAR address=[/ip dhcp-server lease get number=[find mac-address=38:0A:94:A4:71:84] address];
/ip firewall address-list add list=CELULAR address=[/ip dhcp-server lease get number=[find mac-address=1C:AF:05:BD:7E:4F] address];
/ip firewall address-list add list=CELULAR address=[/ip dhcp-server lease get number=[find mac-address=14:49:E0:5F:8D:E8] address];
/ip firewall address-list add list=CELULAR address=[/ip dhcp-server lease get number=[find mac-address=94:51:03:E8:AB:68] address];
/ip firewall address-list add list=CELULAR address=[/ip dhcp-server lease get number=[find mac-address=54:79:75:19:2C:25] address];
/ip firewall address-list add list=CELULAR address=[/ip dhcp-server lease get number=[find mac-address=14:49:E0:5F:8D:E8] address];
/ip firewall address-list add list=CELULAR address=[/ip dhcp-server lease get number=[find mac-address=1C:AF:05:BD:7E:4F] address];
/ip firewall address-list add list=CELULAR address=[/ip dhcp-server lease get number=[find mac-address=38:0A:94:A4:71:84] address];
/ip firewall address-list add list=CELULAR address=[/ip dhcp-server lease get number=[find mac-address=54:79:75:19:2C:25] address];
/ip firewall address-list add list=CELULAR address=[/ip dhcp-server lease get number=[find mac-address=A0:F3:C1:7B:3C:97] address];
/ip firewall address-list add list=CELULAR address=[/ip dhcp-server lease get number=[find mac-address=24:F5:AA:4C:D1:D5] address];
/ip firewall address-list add list=CELULAR address=[/ip dhcp-server lease get number=[find mac-address=2C:41:38:48:70:3D] address];