794 IT Telegram . ?

web proxy MikroTik

6

HTTP FTP proxy- () , . , URL'e, - http://shareit.merionet.ru - , FTP .

MikroTik web-proxy :

  • HTTP. proxy- ;
  • . , proxy-;
  • , , URL (GET, POST .);
  • . , ;
  • . proxy-;
  • proxy-
  • proxy-. , .

Proxy- , .

Web-proxy . , URL, . , . , , , - FTP .

proxy-:

  • , ( );
  • HTTP Firewall'. ;
  • web- , IP- , IP- , URL , HTTP ;
  • , , . web-proxy.

web-proxy

MikroTik, web-proxy :

/ip proxy set

:

  • enabled - web-proxy. (yes - , no - );
  • src-address - IP- proxy-;
  • port - , proxy-;
  • parent-proxy - proxy-;
  • cache-drive - .
  • cache-administrator - email , ;
  • max-cache-size - ( );
  • max-ram-cache-size - RAM ;
  • cache-only-on-disk - , . , ;
  • maximal-client-connections - proxy- . ;
  • maximal-server-connections - . , ;
  • max-fresh-time - ;

proxy- 192.168.11.1, :

ip proxy> set enabled=yes port=8080 src-address=192.168.11.1

Winbox IP → Web Proxy Enabled, IP , proxy-, , Parent proxy.

web-proxy WinBox

web-proxy, () , proxy. Google Chrome Settings → Advanced → Confidentiality and Security, System Proxy settings. LAN settings → Use a proxy server for your LAN Advanced. proxy- HTTP ( 192.168.11.1 8080) :

web-proxy Google Chrome

. , , proxy-.

, NAT Firewall, HTTP proxy. , 192.168.11.0/24

ip firewall nat> add chain=dstnat protocol=tcp src-address=192.168.11.0/24 \
dst-port=80 action=redirect to-ports=8080

Firewall proxy

, :)

, Firewall , , - . : , , , , URL HTTP (POST, GET .)

, , (allow) (deny). , .

, , . , 192.168.11.0/24 HTTP .

ip firewall nat> add chain=dstnat protocol=tcp src-address=192.168.11.0/24 \
dst-port=80 action=redirect to-ports=8080

? . :

/ip proxy access add src-address=192.168.1.0/24 dst-host=www.vk.com action=deny

web-, - , :

/ip proxy access add src-address=192.168.1.0/24 dst-host=:er action=deny

- - Tinder.com, Twitter.com, Viber.com, :)

:

/ip proxy access add src-address=192.168.1.0/24
 add path=*.pdf action=deny
 add path=*.png action=deny
 add path=*.docx action=deny
 add path=*.mp3 action=deny
 add path=*.zip action=deny
 add path=*.rar action=deny

(wildcard), URL .

dst-host dst-path - * - . - *ings.docx .docx , ins ings.docx, paintings.docx, wings.docx ings .

?, . ??ings.docx wnings.docx, paintings.docx, 2 .

, , :.

?

: