Follow us on...
Follow us on G+ Follow us on Twitter Follow us on Facebook Watch us on YouTube
Register
Results 1 to 2 of 2
  1. #1
    Status
    Offline
    awarmanf's Avatar
    Member
    Join Date
    Apr 2008
    Posts
    222
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0

    Script untuk dstnat (proxy transparent) dengan 3 target

    Saya lagi pusing bagaimana buat dstnat dengan 3 target untuk paket tujuan protokol tcp port 80 sbb:

    1. Destination local network.
      dst-address-list=local
    2. Destination nice (iix) network.
      dst-address-list=nice
    3. Destination others (internasional).


    Obyektif adalah agar trafik www ke ke lokal network tidak melalui proxy external, sedangkan trafik www ke nice akan melalui proxy nice 10.10.1.1 dan trafik www ke others akan melalui proxy internasional 10.10.1.2

    Kalau hanya 2 target yakni nice dan others, cukup gampang buatnya:

    Code:
    /ip firewall nat
     1   ;;; redirect www traffic to nice destination to proxy external 10.10.1.1
         chain=dstnat action=dst-nat to-addresses=10.10.1.1 to-ports=3128 protocol=tcp dst-address-list=nice in-interface=lan dst-port=80 
     2   ;;; redirect www traffic to others destination to proxy external 10.10.1.2
         chain=dstnat action=dst-nat to-addresses=10.10.1.2 to-ports=3128 protocol=tcp in-interface=lan dst-port=80
    Apa begini jika dengan 3 target ?
    Code:
    /ip firewall nat
     1   ;;; redirect www traffic to internasional (others) destination to proxy external 10.10.1.2
         chain=dstnat action=dst-nat to-addresses=10.10.1.2 to-ports=3128 protocol=tcp dst-address-list=!nice_local in-interface=lan dst-port=80 
     2   ;;; redirect www traffic to nice destination to proxy external 10.10.1.1
         chain=dstnat action=dst-nat to-addresses=10.10.1.1 to-ports=3128 protocol=tcp dst-address=nice in-interface=lan dst-port=80
    Jadi buat address-list lagi nice_local yang isinya address-list nice dan local. Membaca rule di atas:
    1. Trafik www dengan tujuan selain network nice dan lokal akan dilewatkan ke proxy internasional 10.10.1.2
    2. Trafik www dengan tujuan network nice akan dilewatkan ke proxy nice 10.10.1.1


    Overheadnya adalah buat satu lagi address-list nice dengan tambahan network local.

    Apa ada cara lain yang lebih sederhana ?

    Terimakasih atas perhatian dan sharing pengetahuannya.

  2. #2
    Status
    Offline
    ardi85's Avatar
    Calon Member
    Join Date
    Nov 2007
    Posts
    74
    Reviews
    Read 0 Reviews
    Downloads
    2
    Uploads
    0
    Feedback Score
    0
    IIX - Proxy
    ..............\
    .............Mikrotik - LAN
    ............../
    INT - Proxy

    gini aja om tiap line di kasih proxy

 

 

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. setting transparent proxy di mikrotik 3.25
    By zulqarnain in forum Beginner Basics
    Replies: 5
    Last Post: 14-01-2014, 14:07
  2. (ask) script untuk ganti parent proxy
    By sum14rdi in forum Scripting @ Mikrotik
    Replies: 7
    Last Post: 19-03-2012, 23:24
  3. [ask] script mikrotik untuk schedule dengan hari yang berbeda
    By bzard72 in forum Scripting @ Mikrotik
    Replies: 1
    Last Post: 16-05-2009, 11:35
  4. transparent proxy gak Jalan
    By radenfahmi in forum Beginner Basics
    Replies: 18
    Last Post: 04-02-2009, 06:19
  5. Membatasi koneksi ke web-proxy (transparent)
    By awarmanf in forum Beginner Basics
    Replies: 5
    Last Post: 20-04-2008, 19:32

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •