Web Proxy not working .. with screenshoot

RouterOS General
1

dear all
this is our web proxy setting
it is not working !!!

this is the interface




the web proxy

the Firewall NAT




the traffic is not going through the proxy redirect firewall nat rule as below !!




[admin@MikroTik] /ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic 
 0    chain=dstnat action=redirect to-ports=8080 protocol=tcp 
      src-address-list=192.168.13.0/24 in-interface=ether2 dst-port=80 log=no 
      log-prefix="" 

 1    chain=srcnat action=masquerade log=no log-prefix=""




[admin@MikroTik] /ip proxy> print
                 enabled: yes
             src-address: ::
                    port: 8080
               anonymous: no
            parent-proxy: ::
       parent-proxy-port: 0
     cache-administrator: webmaster
          max-cache-size: unlimited
   max-cache-object-size: 2048KiB
           cache-on-disk: no
  max-client-connections: 600
  max-server-connections: 600
          max-fresh-time: 3d
   serialize-connections: no
       always-from-cache: no
          cache-hit-dscp: 4
              cache-path: web-proxy

any help please?

2

Your NAT rule will capture only port 80, coming from interface ether2, with source address 192.168.13.0/24. Make sure that NAT parameters are set correctly.

Web proxy should work fine.

3

You have specified src-address-list not src-address. I believe that you do not have address lsit on your router where name (not address) is 192.168.13.0/24. Run this command:

“/ip firewall nat set 0 !src-address-list src-address=192.168.13.0/24”

Also you must use out-interface for masquerade to avoid problems in future:
“/ip firewall nat set 0 out-interface=ether1”

4

can you explain please?

5

i do not have any address list !

what should i do?

please explain

6

I gave you precise commands which you need to execute on your router to fix this issue.

7 



[admin@MikroTik] > ip firewall nat set 0 out-interface=ether1                         
failure: outgoing interface matching not possible in input and prerouting chains
8

Sorry. First command was correct. Second one should be for id=1 not id=0

9

ether1 is just for control from my PC !!

10

dear strods
sorry for bothering you

but can you help me set the web proxy correctly?

actually this is my 4th post in this forum and need to set up the proxy correctly

11

People from mikrotik support have already helped you, pointing out the problem; you have to work a little also, you know…
So one more time :
You have mistaken “src-address” and “src-address-list” fields. No big deal, edit your redirect rule, put “192.168.13.0/24” in “src-address” field, then go to “Advanced” tab, remove the data in “src-address-list” and click “OK”.

12

thank you for your reply …

but when i ask for more help it mean that i did what they told me and its not working till now !!

so is it mean that the support only one time or what ?!

thanks

13

This is a user forum. Nobody is obliged to provide you with support services here. If you want to contact the official Mikrotik support, you should email you request and/or questions to support@mikrotik.com.

14

thanks for your reply, but i’m confused! where is the support services in my question? can you explain please?

15

How complicated..
You had a problem and posted in a user forum. People (some from Mikrotik support, check their details in the left column) saw that problem and showed you where the problem was. Problem solved.

RouterOS is very rich, you can do tons of stuff with it, but the counterpart is that it is easy to do configuration mistakes. That is why you have to spend some time to learn how it works and why your initial config failed.
Now, if you have no idea of the difference between src-adress and src-address-list, i suggest you read documentation and understand what was your mistake; or get a training with some nearby Mikrotik trainer.