Community discussions

MUM Europe 2020
 
fanatique
just joined
Topic Author
Posts: 11
Joined: Sat Sep 16, 2006 5:13 am

[SOLVED] need help to configure webproxy

Sat Sep 16, 2006 11:20 am

What rules/filters required in order to successfully utilize webproxy?
Here are what I've done:
- enable Web Proxy through Web Proxy Settings window
- add dstnat to redirect traffic to port 80 to 3128 (default webproxy port)
- add filters to allow traffic from LAN to router on port 3128 AND allow
traffic from router to internet on port 80
but when I tried to surf I always got an error page:
-------------------- quote begin -------------------------
ERROR
The requested URL could not be retrieved

While trying to retrieve the URL: /

The following error was encountered:

Invalid URL
Some aspect of the requested URL is incorrect. Possible problems:

Missing or incorrect access protocol (should be `http://'' or similar)
Missing hostname
Illegal double-escape in the URL-Path
Illegal character in hostname; underscores are not allowed
--------------------- quote end -------------------------

Note: I also use masquerade
Last edited by fanatique on Wed Nov 01, 2006 8:35 am, edited 3 times in total.
 
watchoutz
just joined
Posts: 7
Joined: Wed Dec 07, 2005 9:15 pm

Sun Sep 17, 2006 9:48 am

you must check the transparant proxy in the web proxy setting
 
fanatique
just joined
Topic Author
Posts: 11
Joined: Sat Sep 16, 2006 5:13 am

Mon Sep 18, 2006 1:59 pm

watchoutz, thank u very much...it worked!
 
fanatique
just joined
Topic Author
Posts: 11
Joined: Sat Sep 16, 2006 5:13 am

Wed Sep 20, 2006 7:02 am

you must check the transparant proxy in the web proxy setting
I just realized that checking that option make my internal IP exposed to the internet.
Is this an expected behaviour ?
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6619
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Wed Sep 20, 2006 8:24 am

You have to protect the proxy from being used as spam relay.
1) 'ip web-proxy access' rules protect proxy from unauthorized access.
2) 'ip firewall filter' chain=input protects router from unauthorized access, as well proxy.
 
fanatique
just joined
Topic Author
Posts: 11
Joined: Sat Sep 16, 2006 5:13 am

Thu Sep 21, 2006 7:34 am

What I meant was that when I visited sites such showmyip.com, it will display my computer IP (private) instead of my router's IP (public)
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6619
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Thu Sep 21, 2006 8:43 am

First address should be outgoing public address, probably local address will be shown in 'Browser (User-Agent) Exposed Headers' menu, but address from local space will be unavailable from outer networks (10.0.0.0, 172.16.0.0, 192.168.0.0), because of NAT (masquerading).
 
fanatique
just joined
Topic Author
Posts: 11
Joined: Sat Sep 16, 2006 5:13 am

Mon Oct 16, 2006 5:29 am

First address should be outgoing public address,
Sorry for taking so long to get back...been distracted by other problems.

Sergejs, I'm not sure I follow you.
What do you mean by "First address"?
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6619
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Mon Oct 16, 2006 8:17 am

First address, that is shown on showmyip.com.
 
fanatique
just joined
Topic Author
Posts: 11
Joined: Sat Sep 16, 2006 5:13 am

Tue Oct 17, 2006 5:21 am

Sergejs, thank you for your assistance

I was carried away by the fact that our former router software (WinRoute) didn't give the same result with sites like showmyip.com
With WinRoute, only IP of proxy server / internet gateway is shown while with Mikrotik both (local and public) are shown.
 
goldclick
Frequent Visitor
Frequent Visitor
Posts: 51
Joined: Fri Sep 17, 2004 10:48 pm
Location: Nigeria
Contact:

Thu Oct 26, 2006 2:34 am

Sergejs, thank you for your assistance

I was carried away by the fact that our former router software (WinRoute) didn't give the same result with sites like showmyip.com
With WinRoute, only IP of proxy server / internet gateway is shown while with Mikrotik both (local and public) are shown.
the 'x-forwarded-for' header is not anonymised in web-proxy. winroute conceals this.
Sunday Idajili
ITClick Networx Limited
 
fanatique
just joined
Topic Author
Posts: 11
Joined: Sat Sep 16, 2006 5:13 am

Wed Nov 01, 2006 8:34 am

the 'x-forwarded-for' header is not anonymised in web-proxy. winroute conceals this.
goldclick, thank you for confirming it.

Who is online

Users browsing this forum: akops, daveavagnina, Google [Bot], jindranix, llag and 61 guests