Community discussions

MUM Europe 2020
 
shadowteller
just joined
Topic Author
Posts: 20
Joined: Tue May 22, 2007 7:10 pm

Website redirect....

Tue Dec 02, 2008 8:21 am

Layout:
A campground that has a wireless setup and also Kiosks. The kiosks sit on a separate network with a 10M Fiber Optic link.

The wireless network is connected to a single T-1. All routers are backhauled to a central point with a Hotspot server running on it.

Problem:
Campground would like to make it so a website like http://www.youtube.com gets redirected to a /block.html page on the MT router. Which is an HTML page that states that the site has been blocked but they can access the site at the Kiosks.

In the same scenario specific websites that violate the EULA they want a redirect to /violation.html page on the router which states they have reached a website that is forbidden.

these are both going to be manually controlled lists.

Question:
How would you go about doing this? Is it a match and mark scenario in the Firewall? How exactly is it done. Cause right now I can match a website and redirect it to another website, but I can't select individual pages on the website. SO I can choose 192.168.100.1, but not 192.168.100.1/block.html


With Regards,
~prestN
 
User avatar
macgaiver
Forum Guru
Forum Guru
Posts: 1729
Joined: Wed May 18, 2005 5:57 pm
Location: Sol III, Sol system, Sector 001, Alpha Quadrant

Re: Website redirect....

Tue Dec 02, 2008 8:27 am

It is possible only with web-proxy - "redirect-to" in access list.
With great knowledge comes great responsibility, because of ability to recognize id... incompetent people much faster.
 
shadowteller
just joined
Topic Author
Posts: 20
Joined: Tue May 22, 2007 7:10 pm

Re: Website redirect....

Tue Dec 02, 2008 9:28 pm

Thank you for timely reply...

So would you match inside the web-proxy as well instead of with Firewall rules?
 
Pepo
Frequent Visitor
Frequent Visitor
Posts: 86
Joined: Thu May 29, 2008 1:34 am

Re: Website redirect....

Wed Dec 03, 2008 12:03 am

ok, all
but i not understand, can any one give me a quick example ????
also i want some on my customers who only use webproxy and the others don't use it
can any one give me a quick example to do that ???
8)
 
User avatar
macgaiver
Forum Guru
Forum Guru
Posts: 1729
Joined: Wed May 18, 2005 5:57 pm
Location: Sol III, Sol system, Sector 001, Alpha Quadrant

Re: Website redirect....

Wed Dec 03, 2008 9:18 am

Sorry, giving everything in examples will not achieve understanding - i will give you main points:

1) create an address-list with users you like to redirect
2) create a nat rule for this address list to redirect it to routers proxy
3) set up proxy
4) go into proxy access list and create necessary rules.
With great knowledge comes great responsibility, because of ability to recognize id... incompetent people much faster.
 
shadowteller
just joined
Topic Author
Posts: 20
Joined: Tue May 22, 2007 7:10 pm

Re: Website redirect....

Wed Dec 03, 2008 10:40 am

Thank you again for the timely response.....

Step 4 is the one I am messing up....

Under Src address I have 10.10.10.0
Local Port 8080 which is port Transparent Proxy is running on
DST Host is w ww.youtube.com
Path is *
Method is Get
Action Deny
Redirect to 10.10.10.1/block.html


I get no hits to this

It also doesn't work...what am I missing....
 
User avatar
macgaiver
Forum Guru
Forum Guru
Posts: 1729
Joined: Wed May 18, 2005 5:57 pm
Location: Sol III, Sol system, Sector 001, Alpha Quadrant

Re: Website redirect....

Wed Dec 03, 2008 12:04 pm

I just use *youtube* as path without any method
With great knowledge comes great responsibility, because of ability to recognize id... incompetent people much faster.
 
shadowteller
just joined
Topic Author
Posts: 20
Joined: Tue May 22, 2007 7:10 pm

Re: Website redirect....

Thu Dec 04, 2008 2:31 am

odd it still doesn't work...must be something else *scratches head*
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24387
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Website redirect....

Thu Dec 04, 2008 12:57 pm

is that PC actually using the proxy?
No answer to your question? How to write posts
 
shadowteller
just joined
Topic Author
Posts: 20
Joined: Tue May 22, 2007 7:10 pm

Re: Website redirect....

Sat Dec 06, 2008 9:03 am

ip firewall nat add in-interface=lanport dst-port=80 protocol=tcp action=redirect to-ports=8080 chain=dstnat

Will block with the "ERROR: Forbidden" page. But no other traffic will work.


ip firewall nat add in-interface=wanport dst-port=80 protocol=tcp action=redirect to-ports=8080 chain=dstnat

Will allow all traffic but not block anything at all.

So I am not sure if I am messing up the firewall rule or the Proxy Settings.

Who is online

Users browsing this forum: FlyRaz, idrekdon, saaremaa, selimadn, strods and 99 guests