Re: [squid-users] microtik router with squid tproxy

On 17/08/11 17:57, Hasanen AL-Bana wrote:
> it is easy to forward port 80 traffic to Squid using Mikrotik , it can
> be done by going to ip->firewall->nat and adding new dst-nat.
> Or you can just use your cache server as a gateway for the Mikrotik router.
>

NAT _must_ be done on the Squid box. How the packets get there does not
matter a whole lot, as long as the clients destination IP is preserved
until it reaches the Squid box. DNAT destroys the destination IP.

> On Wed, Aug 17, 2011 at 8:16 AM, Benjamin wrote:
>>
>> Hi ALL,
>>
>> Currently i have a requirement to configure squid for tproxy feature with microtik router os.If i will configure policy routing in microtik router for port 80 traffic pass to squid box, in that case , do i use tproxy feature or ?
>>

If you intercept packets intended for other server and pass them to
Squid you must use NAT interceptionor TPROXY on the squid box to catch them.

If you use other methods of transparency; such as transparent
configuration (aka. WPAD / PAC). You don't need to worry about
configuring either microtik or Squid with anything complex.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.14
   Beta testers wanted for 3.2.0.10