Community discussions

MUM Europe 2020
 
psycoclan1
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 54
Joined: Mon Aug 11, 2008 4:30 pm
Location: England

Transparent Web Proxy configuration

Sat May 30, 2015 10:52 pm

Hello guys, ill go straight to the point.

I have a mikrotik router and a DSL. Behind mikrotik router is my whole LAN.

Mikrotik has 2 LAN cards (its a PC with 8GB flash card)

dsl modem : 192.168.1.1/24
ether1-dsl : 192.168.1.2/24

ether2-lan : 192.168.2.1/24

dhcp server on ether2 192.168.2.10-192.168.2.250

Now i set a web proxy up with transparency. I did that because i want my devices to access the internet faster with cached hosts and consume less bandwidth.

So when i finished with the masquarade in firewall for my NAT, i went to IP->web proxy

i clicked enabled, port 8989

max cache size 4gb
max clients 3000
max server connections 3000
TOS 10

max fresh time 190d


Then to firewall nat, i set a dstnat the whole 2.0/24 redirection to port 8989, the destination ports 80,3128 (protocol tcp)

After these settings i see in cache contents that mikrotik caches all traffic to these ports. However i want to exclude some certain IPs from the cache. Can you describe me a way to do it?

Thanks in advance guys!!!
 
reinerotto
Member
Member
Posts: 439
Joined: Thu Dec 04, 2008 2:35 am

Re: Transparent Web Proxy configuration

Sun May 31, 2015 7:04 pm

Use a real proxy, like squid, on a separate box.
 
User avatar
kangndo
just joined
Posts: 17
Joined: Mon Dec 09, 2013 12:59 pm
Contact:

Re: Transparent Web Proxy configuration

Mon Jun 01, 2015 1:51 am


ether2-lan : 192.168.2.1/24

dhcp server on ether2 192.168.2.10-192.168.2.250


Then to firewall nat, i set a dstnat the whole 2.0/24 redirection to port 8989, the destination ports 80,3128 (protocol tcp)

After these settings i see in cache contents that mikrotik caches all traffic to these ports. However i want to exclude some certain IPs from the cache. Can you describe me a way to do it?

Thanks in advance guys!!!
ether2-lan : 192.168.2.1/24
Add new different ip address on ether2-lan, ie: 192.168.3.1/24 and use it for non cached user
Last edited by kangndo on Tue Jun 02, 2015 1:03 pm, edited 1 time in total.
Regards, Kangndo
 
psycoclan1
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 54
Joined: Mon Aug 11, 2008 4:30 pm
Location: England

Re: Transparent Web Proxy configuration

Tue Jun 02, 2015 1:09 am

Cheers mate!!! Ive never thought about it before!!! Thank you very much! You saved me of a lot of effort and time!! :D :D :D

Who is online

Users browsing this forum: Google [Bot] and 126 guests