transparent proxy for public ip

RouterOS General
1

Hi forum,

Is it possible to make transparent proxy in Public IP network ? I mean the client network is getting public ip, How to redirect client http port to proxy server where their is no NAT running ?


Regards

“a4ubd”

2

if you need to preserve users’ IPs - then you should use external Squid proxy with Balabit TProxy feature enabled. on ROS you may only redirect to internal proxy, so websites will see router’s IP, not user’s one

3

How do Mikrotik user can use that external proxy?

4

just setup Squid box between MikroTik and Internet

5

when i do that i can enter mikrotik os inside my network not els

so i cant enter my usermanger from explorer abroud my network

we need another way

6

sorry, I don’t understand you

if you do not need some kind of access - block it! there’s none of Squid’s business

7

Hello, how do you tell mikrotik to look at transparrent proxy ?

Ok, I want to setup squid box, from what I understand we put the squid box after MT and Internet connection. So I will have the squid box setup internaly… I have no problem with that, now how do I tell MT to send requests to that squid box? I am using hotspot on my MT… Can you explain the configuration, I am not familiar with the setup web proxy.

Daniel

8

you should either setup dst-NAT of 80 port to your Squid, or setup NAT redirect of port 80 to ROS Proxy and set Parent Proxy to your Squid in you ROS Proxy

9

Is it possible to do dst_NAT in public ip ?

10

yes, why not. just do not forget to masquerade that traffic for clients with internal addresses