MikroTik RouterOS v2.9, Справочное руководство

Страница: 548 / 709

If parent-proxy property is specified, it is possible to tell proxy server whether to try to pass the
request to the parent proxy or to resolve it connecting to the requested server directly. Direct Access
List is managed just like Proxy Access List described in the previous chapter except the action
argument.
Property Description
action ( allow | deny ; default: allow ) - specifies the action to perform on matched packets
• allow - always resolve matched requests directly bypassing the parent router
• deny - resolve matched requests through the parent proxy. If no one is specified this has the
same effect as allow
dst-address ( IP address | netmask ) - destination address of the IP packet
dst-host ( wildcard ) - IP address or DNS name used to make connection the target server (this is
the string user wrote in his/her browser before specifying port and path to a particular web page)
dst-port ( port ) - a list or range of ports the packet is destined to
hits ( read-only: integer ) - the number of requests that were policed by this rule
local-port ( port ) - specifies the port of the web proxy via which the packet was received. This
value should match one of the ports web proxy is listening on.
method ( any | connect | delete | get | head | options | post | put | trace ) - HTTP method used in the
request (see HTTP Methods section in the end of this document)
path ( wildcard ) - name of the requested page within the target server (i.e. the name of a particular
web page or document without the name of the server it resides on)
src-address ( IP address | netmask ) - source address of the IP packet
Notes
Unlike the access list, the direct proxy access list has default action equal to deny. It takes place
when no rules are specified or a particular request did not match any rule.
Cache Management
Home menu level: /ip web-proxy cache
Description
Cache access list specifies, which requests (domains, servers, pages) have to be cached locally by
web proxy, and which not. This list is implemented exactly the same way as web proxy access list.
Default action is to cache object (if no matching rule is found).
Property Description
action ( allow | deny ; default: allow ) - specifies the action to perform on matched packets
• allow - cache objects from matched request
• deny - do not cache objects from matched request
dst-address ( IP address | netmask ) - destination address of the IP packet
Page 534 of 695
Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.