Summary
The MikroTik RouterOS implements the following proxy server features:
•
Regular HTTP proxy
•
Transparent proxy. Can be transparent and regular at the same time
•
Access list by source, destination, URL and requested method
•
Cache access list (specifies which objects to cache, and which not)
•
Direct Access List (specifies, which resources should be accessed directly, and which -
through another proxy server)
•
Logging facility
Quick Setup Guide
To enable HTTP proxy, do the following:
[admin@MikroTik] ip proxy> set enabled=yes
[admin@MikroTik] ip proxy> print
enabled: yes
src-address: 0.0.0.0
port: 8080
parent-proxy: 0.0.0.0:0
cache-drive: system
cache-administrator: "webmaster"
max-disk-cache-size: none
max-ram-cache-size: 100000KiB
cache-only-on-disk: yes
maximal-client-connections: 1000
maximal-server-connections: 1000
max-object-size: 2000KiB
max-fresh-time: 3d
[admin@MikroTik] ip proxy>
Remember to secure your proxy by preventing unauthorized access to it, otherwise it may be used
as an open proxy. Also you need to setup destination NAT in order to utilize transparent proxying
facility:
[admin@MikroTik] ip firewall nat> add chain=dstnat protocol=tcp dst-port=80
action=redirect to-ports=8080
[admin@MikroTik] ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic
0
chain=dstnat protocol=tcp dst-port=80 action=redirect to-ports=8080
[admin@MikroTik] ip firewall nat>
Specifications
Packages required: system
License required: level3
Home menu level: /ip proxy
Standards and Technologies:
HTTP/1.0
,
HTTP/1.1
,
FTP
Related Documents
Page 530 of 695
Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
