Holla.
I'm trying to configure transparent proxy on mikrotik 2.9.6 but problem persist. Should someone can tell me about dest-nat config. Did i put in in-interface LAN/WAN eth.? Manual is pretty confusing...

Just add this:

FIrst you set webproxy port you may keep it 80 or 8088 etc

if you have defined port 80 add following code-
add chain=dstnat src-address=(your network) protocol=tcp dst-port=80 action=redirect to-ports=80

and if you have defined port 80 add following code-
add chain=dstnat src-address=(your network) protocol=tcp dst-port=80 action=redirect to-ports=8088

tnx.
I want to set firewall rule to outbound interface, with that i want to secure webproxy server from trying using a connection (to cut secrvice on lower level).
Something like Chain: INPUT, Protocol: TCP, src Port: 8080, Action:DROP In Interface: PUBLIC
is it ok?

tnx.
I want to set firewall rule to outbound interface, with that i want to secure webproxy server from trying using a connection (to cut secrvice on lower level).
Something like Chain: INPUT, Protocol: TCP, src Port: 8080, Action:DROP In Interface: PUBLIC
is it ok?

Use proxy access lists..

Regards

Problem is when i using webproxy ACL i can get:

ERROR
The requested URL could not be retrieved

While trying to retrieve the URL: http://www.google.com/

The following error was encountered:

* Access Denied.

Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect.

Your cache administrator is webmaster.

i wont to secure webproxy to doesent get that page!

Problem is when i using webproxy ACL i can get:

ERROR
The requested URL could not be retrieved

While trying to retrieve the URL: http://www.google.com/

The following error was encountered:

* Access Denied.

Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect.

Your cache administrator is webmaster.

i wont to secure webproxy to doesent get that page!

Thats because you have to allow acces to your network first...

Regards