Web Proxy

RouterOS General
1

Hi All,
I have searched all over the net for an answer to this problem so hoping someone here can help.
I want to setup the Web Proxy so that it has different settings for different users.
So lets say I want 2 users to be able to access facebook.com and twitter.com and nothing else,
and I have two other users I want to be able to access google.com and utube.com and nothing else.

I have been looking at using address lists but I can’t seem to do that under the Proxy rules.
I have also looked at running the Proxy on 2 different ports eg: 6001, and 6002, so I can send one group to the first proxy 6001 and the second group to the second proxy on port 6002
But then I can’t seem to add a rule like:
/ip proxy access set local-port=6001 dst-port=80 dst-host=google.com action=allow
When I put in that rule the terminal comes back with number: - and I don’t know what to put in here.

So can someone tell me how to have seperate settings for different users.
I know I could just put in 4 rules to say that all the proxy users have access to the 4 web sites but the real answer I want to do is to separate the two groups and have individual settings.

2

In the access list of the web proxy have you tried to specify the source address? That should do it, like:

/ip proxy access
add src-address=192.168.1.x dst-host=whatever action=allow
3

Hi everyone.
I just became a happy (but a little confused) owner of Mikrotik RB951G-2HnD.
I have an internet connection from my ISP via ethernet. We have something like 20 users in local network.
I would like to use Mikrotik as a “gateway” with non-transparent proxy server with statistics on every users, bandwidth limiting, some url adress blocking, NAT for some users and some other regular features for gateway.
Please give some kind of info where to start, where can I find some kind of tutorial on this and\or other info that can help.

Thanks in advance for reply.

4

What do you mean by statistics for every user? To do that,you probably would need a PC with cacti in it for example, which would collect data from routerboard.
A good place to start is wiki http://wiki.mikrotik.com/wiki/Main_Page