Page 1 of 1

PROXY SERVER + MIKROTIK ROUTER (can mikrotik do this..?)

Posted: Fri Nov 02, 2007 11:09 am
by larmaid

Re: PROXY SERVER + MIKROTIK ROUTER (can mikrotik do this..?)

Posted: Fri Nov 02, 2007 12:29 pm
by GuJack20
Yes it can :)

It would be better if it was in english.

Re: PROXY SERVER + MIKROTIK ROUTER (can mikrotik do this..?)

Posted: Fri Nov 02, 2007 2:13 pm
by larmaid
ouw thx for a quick respons..!
:shock: mikrotik can do this....!!!! can u pliss help me how to do this...?

nb:
- mikrotik webproxy transparent enable = yes
- proxy server transparent enable = yes

when a client try to browsing through proxy server, and i opened the access-log in proxy server the ip client = ip router it self not the ip client it self

Re: PROXY SERVER + MIKROTIK ROUTER (can mikrotik do this..?)

Posted: Fri Nov 02, 2007 3:56 pm
by raktim
In ip routes u have to add destination & gateway should be ur proxy server address...
i think it's working good...

Re: PROXY SERVER + MIKROTIK ROUTER (can mikrotik do this..?)

Posted: Sat Nov 03, 2007 5:33 pm
by t3rm
ouw thx for a quick respons..!
:shock: mikrotik can do this....!!!! can u pliss help me how to do this...?

nb:
- mikrotik webproxy transparent enable = yes
- proxy server transparent enable = yes

when a client try to browsing through proxy server, and i opened the access-log in proxy server the ip client = ip router it self not the ip client it self

In your picture, the proxy is not on the mikrotik,
then why you set the webproxy on mikrotik ON ?

You just need 1 DNAT rule in Firewall NAT to force your users request port 80 tcp going through Internet forwarded to Squid-Linux Server according to the picture you gave.

Re: PROXY SERVER + MIKROTIK ROUTER (can mikrotik do this..?)

Posted: Sat Nov 03, 2007 11:16 pm
by GuJack20
Hi.

I have the same setup as larmaid and i have configured all the browsers to access directly the proxy on linux box (i dont want to make a transparent proxy). The problem is that MT recognizes all the traffic as one Ip (the ip of the linux box). What can i do to prevent this (cause i want to be able to manage the clients ip traffic).
I have also tried to enable the MT proxy (squid version) and give it as parent proxy the ip of the Linux box. This works but i find that the response is slower.

So my question one more time is this. What can i do to use the proxy in my linux box but that the clients ips get recognized in MT???

Thanks.

Re: PROXY SERVER + MIKROTIK ROUTER (can mikrotik do this..?)

Posted: Mon Nov 05, 2007 8:59 pm
by GuJack20
Anyone???

Re: PROXY SERVER + MIKROTIK ROUTER (can mikrotik do this..?)

Posted: Wed Nov 07, 2007 6:50 am
by larmaid
still waiting for an answer.... :(

Re: PROXY SERVER + MIKROTIK ROUTER (can mikrotik do this..?)

Posted: Fri Nov 09, 2007 8:26 pm
by t3rm
still waiting for an answer.... :(
read my post, you can do it.

Re: PROXY SERVER + MIKROTIK ROUTER (can mikrotik do this..?)

Posted: Mon Nov 12, 2007 5:12 pm
by monaro
You are below the router. There is no way you can see client ip address. Unless you put proxy under the LAN itself.

Re: PROXY SERVER + MIKROTIK ROUTER (can mikrotik do this..?)

Posted: Mon Nov 12, 2007 8:28 pm
by hulk-bd
raktim said:

In ip routes u have to add destination & gateway should be ur proxy server address...
i think it's working good...
In ip routes u have to add destination & gateway should be ur proxy server address...
i think it's working good...


Mr. Raktim,

Do you have any idea what you are telling here!!?? Please don't put any bullshit here, this is a place where we can help each other not to make them crazy. :) lol

Peace

Re: PROXY SERVER + MIKROTIK ROUTER (can mikrotik do this..?)

Posted: Tue Nov 13, 2007 7:07 pm
by larmaid
You are below the router. There is no way you can see client ip address. Unless you put proxy under the LAN itself.
yes, the proxy server can not see the client ip address because the proxy server is below the router but when i set the clients to enter the proxy manually, the proxy can see the clients ip address. so mikrotik can not do this right...!

Re: PROXY SERVER + MIKROTIK ROUTER (can mikrotik do this..?)

Posted: Wed Nov 14, 2007 2:37 pm
by jorj
What are you trying to achieve, exactly ?
See traffic for each client, or what exactly ?

You can put a second MT, put the proxy betweeen this and your gw, and you're done in whatever you are trying. By routing or bridging.

If you are instructing your clients to directly use the proxy in the os, you are not forcing them with transparent proxy and redirect, you can put some traffic shaping in the linux box hosting the proxy.

Re: PROXY SERVER + MIKROTIK ROUTER (can mikrotik do this..?)

Posted: Wed Nov 14, 2007 9:53 pm
by GuJack20
Yes.See traffic for each IP.

T3rm has posted a solution in a different thread but i haven't yet found the time to test it.

(to put 2 routers i don't think is a solution, + is an expensive one)

Re: PROXY SERVER + MIKROTIK ROUTER (can mikrotik do this..?)

Posted: Fri Nov 16, 2007 8:52 am
by jorj
Your choice.
Doesn't seem so expensive to try a rb150, or a custom x86.

When you're done, come back and tell us....

Re: PROXY SERVER + MIKROTIK ROUTER (can mikrotik do this..?)

Posted: Sun Nov 18, 2007 4:26 pm
by bushy
What can i do to prevent this (cause i want to be able to manage the clients ip traffic).
You could put a 3rd ethernet card in your Mikrotik gateway box, connect the Squid box to that and add rules there
or
replace the LAN switch with a managed switch or put another mikrotik device in front of it
or
Use DELAY-POOLS in squid
or
Put a second ethernet card in the Squid box and put it between the Mikrotik and the ISP ( you need to set it up properly for security,reliability)

Problem with putting the Squid box in front of the Mikrotik is if it dies it will stop the traffic flow ( consider ethernet card with "bypass" ).