Community discussions

MikroTik App
 
sauravshrestha
just joined
Topic Author
Posts: 1
Joined: Sat Dec 10, 2011 7:18 am

proxy for https connecton

Sat Dec 10, 2011 7:32 am

hi...
i am using mikrotik router board750GL
currently i have some problem on web proxy, i configured web proxy, and i access denied few webpages and download extensoins.
for example:
*facebook*.com = deny
*twitter*.com = deny
*.avi = deny
*.mpeg - deny

but when the clients use https://facebook.com then facebook page is smoothly run
so how do i block https connection also from mikrotik router webproxy.

anybody help please........
 
jandafields
Forum Guru
Forum Guru
Posts: 1514
Joined: Mon Sep 19, 2005 6:12 pm

Re: proxy for https connecton

Thu Dec 22, 2011 11:47 pm

hi...
i am using mikrotik router board750GL
currently i have some problem on web proxy, i configured web proxy, and i access denied few webpages and download extensoins.
for example:
*facebook*.com = deny
*twitter*.com = deny
*.avi = deny
*.mpeg - deny

but when the clients use https://facebook.com then facebook page is smoothly run
so how do i block https connection also from mikrotik router webproxy.

anybody help please........
You CAN NOT DO THIS.

Web-Proxy is for HTTP ONLY!!! The Web-Proxy is NOT for HTTPS!!!!

You need a seperate external proxy like squid if you want to proxy https.
 
User avatar
marioclep
Trainer
Trainer
Posts: 140
Joined: Sat Jul 11, 2009 4:36 pm
Location: Cordoba - Argentina
Contact:

Re: proxy for https connecton

Tue Dec 27, 2011 7:32 pm

You CAN NOT DO THIS.

Web-Proxy is for HTTP ONLY!!! The Web-Proxy is NOT for HTTPS!!!!

You need a seperate external proxy like squid if you want to proxy https.
Actually in wiki says: "This service performs proxying of HTTP and HTTP-proxy (for FTP, HTTP and HTTPS protocols) requests, so I'm interested too...": http://wiki.mikrotik.com/wiki/Manual:IP/Proxy
---------------------

Ing. Mario D. Clep
CTO - MKE Solutions
MikroTik Certified Trainer
 
User avatar
Caci99
Forum Guru
Forum Guru
Posts: 1072
Joined: Wed Feb 21, 2007 2:26 pm
Location: Tirane
Contact:

Re: proxy for https connecton

Wed Dec 28, 2011 12:21 am

I also think that you can not use webproxy for https connections.
But if you want to try you will need to redirect https connections to your webproxy:
/ip firewll nat
add chain=dstnat protocol=tcp dst-port=443 action=redirect to-ports=8080
-Toni-
Don't crash the ambulance, whatever you do
 
User avatar
marioclep
Trainer
Trainer
Posts: 140
Joined: Sat Jul 11, 2009 4:36 pm
Location: Cordoba - Argentina
Contact:

Re: proxy for https connecton

Wed Dec 28, 2011 3:26 pm

I also think that (actually, I never could). I'm just curious for that post in the wiki...
---------------------

Ing. Mario D. Clep
CTO - MKE Solutions
MikroTik Certified Trainer
 
jandafields
Forum Guru
Forum Guru
Posts: 1514
Joined: Mon Sep 19, 2005 6:12 pm

Re: proxy for https connecton

Wed Dec 28, 2011 11:48 pm

Webproxy with HTTPS has been discussed here many times before. I think the wiki has a mistake.
 
User avatar
Arpanet
Member Candidate
Member Candidate
Posts: 268
Joined: Sat Aug 24, 2013 8:26 pm

Re: proxy for https connecton

Sun Mar 09, 2014 9:28 pm

is there another way to solve this?
Arpanet.
There's no distance in the world.
 
User avatar
Caci99
Forum Guru
Forum Guru
Posts: 1072
Joined: Wed Feb 21, 2007 2:26 pm
Location: Tirane
Contact:

Re: proxy for https connecton

Sun Mar 09, 2014 10:14 pm

is there another way to solve this?
I think it is against the idea of https it self. https are secure connections, and wouldn't be apropriate for any to cache sensitive pages (except for NSA :) )
-Toni-
Don't crash the ambulance, whatever you do

Who is online

Users browsing this forum: sindy, sjocampo and 84 guests