Dear Sir,
i have redirect all http request to webproxy port but i don’t wnat to redirect youtube , i want my user to fetch youtube direct from the internet so how can i do it?
Best Regards
put the ip addresses of youtube into the nat rules BEFORE the webproxy and masquerade them directly to the internet. Or put a NOT (!) address list in the nat rule for the webproxy with the addresses for youtube.
That is quite challenging, because the YouTube IP addresses may change out of the blue due to routing and load balacing made from Google management and their CDN.
youtube videos are not cached anyway, so I think by default they are taken directly from internet …
Some routers (Cisco) allow you to use URL’s instead of IP addresses. I REALLY REALLY wish that the mikrotik would allow this!
How would the router resolve them, how often? What would happen if the resolving failed at one moment? What to do with multiple IP addresses?
I don’t know how Cisco actually implements it.
But, for example, the following snippet is allowed in their firewall:
match protocol http host *youtube.com*|*video.google.com*
match protocol http mime video/flv|video/x-flv|video/mp4|video/x-m4v|audio/mp4a-latm
match protocol http mime video/3gpp|video/quicktime
match protocol http url *.flv|*.mp4|*.m4v|*.m4a|*.3gp|*.mov
that is for proxy. in RouterOS you can do that for proxy
http://wiki.mikrotik.com/wiki/Manual:IP/Proxy
above complaint was for firewall mangle.
No, it is also for filter, mangle, nat, etc:
Router(config)#class-map match-any YOUTUBE
Router(config-cmap)# match protocol http url “*youtube.com”
Router(config)# policy-map MARK-YOUTUBE
Router(config-pmap)# class YOUTUBE
Router(config-pmap)# set ip dscp 1
Router(config)# access-list 190 deny ip any any dscp 1