[SOLVED] need help to configure webproxy

fanatique · Sat Sep 16, 2006 11:20 am

What rules/filters required in order to successfully utilize webproxy?
Here are what I've done:
- enable Web Proxy through Web Proxy Settings window
- add dstnat to redirect traffic to port 80 to 3128 (default webproxy port)
- add filters to allow traffic from LAN to router on port 3128 AND allow
traffic from router to internet on port 80
but when I tried to surf I always got an error page:
-------------------- quote begin -------------------------
ERROR
The requested URL could not be retrieved

While trying to retrieve the URL: /

The following error was encountered:

Invalid URL
Some aspect of the requested URL is incorrect. Possible problems:

Missing or incorrect access protocol (should be `http://'' or similar)
Missing hostname
Illegal double-escape in the URL-Path
Illegal character in hostname; underscores are not allowed
--------------------- quote end -------------------------

Note: I also use masquerade

watchoutz · Sun Sep 17, 2006 9:48 am

you must check the transparant proxy in the web proxy setting

fanatique · Mon Sep 18, 2006 1:59 pm

watchoutz, thank u very much...it worked!

fanatique · Wed Sep 20, 2006 7:02 am

you must check the transparant proxy in the web proxy setting

I just realized that checking that option make my internal IP exposed to the internet.
Is this an expected behaviour ?

Wed Sep 20, 2006 8:24 am

You have to protect the proxy from being used as spam relay.
1) 'ip web-proxy access' rules protect proxy from unauthorized access.
2) 'ip firewall filter' chain=input protects router from unauthorized access, as well proxy.

fanatique · Thu Sep 21, 2006 7:34 am

What I meant was that when I visited sites such showmyip.com, it will display my computer IP (private) instead of my router's IP (public)

Thu Sep 21, 2006 8:43 am

First address should be outgoing public address, probably local address will be shown in 'Browser (User-Agent) Exposed Headers' menu, but address from local space will be unavailable from outer networks (10.0.0.0, 172.16.0.0, 192.168.0.0), because of NAT (masquerading).

fanatique · Mon Oct 16, 2006 5:29 am

First address should be outgoing public address,

Sorry for taking so long to get back...been distracted by other problems.

Sergejs, I'm not sure I follow you.
What do you mean by "First address"?

Mon Oct 16, 2006 8:17 am

First address, that is shown on showmyip.com.

fanatique · Tue Oct 17, 2006 5:21 am

Sergejs, thank you for your assistance

I was carried away by the fact that our former router software (WinRoute) didn't give the same result with sites like showmyip.com
With WinRoute, only IP of proxy server / internet gateway is shown while with Mikrotik both (local and public) are shown.

goldclick · Thu Oct 26, 2006 2:34 am

Sergejs, thank you for your assistance

I was carried away by the fact that our former router software (WinRoute) didn't give the same result with sites like showmyip.com
With WinRoute, only IP of proxy server / internet gateway is shown while with Mikrotik both (local and public) are shown.

the 'x-forwarded-for' header is not anonymised in web-proxy. winroute conceals this.

fanatique · Wed Nov 01, 2006 8:34 am

the 'x-forwarded-for' header is not anonymised in web-proxy. winroute conceals this.

goldclick, thank you for confirming it.

[SOLVED] need help to configure webproxy

[SOLVED] need help to configure webproxy

Who is online