Untuk membuat transparent proxy server sebanarnya mudah, teorinya kita tinggal mengalihkan permintaan dari port 80 ke port proxy misalkan 3128. Anggap saja sudah ada mikrotik yang sudah terinstall dengan 2 Lan card masing-masing ether1 yang terkonkesi ke internet dan ether2 untuk koneksi ke LAN
internet<—->ether1//ether2<——>switch<—->LAN
Ip internet ether1 = 192.168.1.100
Ip lan ether2 =192.168.0.100 —> dijadikan gateway bagi komputer di LAN.
langkah pertama kita (lo aja) lakukan masquerade bagi komputer2 yang ada di LAN supaya bisa berinternetan:
[admin@MikroTik] > ip firewall nat add chain=srcnat action=masquerade out-interface=ether1
Gambarnya kurang lebih seperti ini :
Selanjutnya setting service proxy
[admin@MikroTik] > ip proxy set enabled=yes
[admin@MikroTik] > ip web-proxy set
cache-administrator=p_cgate@yahoo.co.id
[admin@MikroTik] > ip web-proxy print
enabled: yes
src-address: 0.0.0.0
port: 3128
hostname: “mikrotik.lan.net”
transparent-proxy: yes
parent-proxy: 0.0.0.0:0
cache-administrator: “p_cgate@yahoo.co.id”
max-object-size: 4096KiB
cache-drive: system
max-cache-size: none
max-ram-cache-size: unlimited
status: running
reserved-for-cache: 0KiB
reserved-for-ram-cache: 154624KiB
Pastikan status:runing.
Tampilan seperti berikut:
Selanjutnya buat rule untuk proxy biar transparent:
[admin@MikroTik] ip firewall nat add chain=dstnat in-interface=ether2 src-address=192.168.0.0/24 protocol=tcp dst-port=80 action=redirect to-ports=3128
Lewat winbox :
1. Aktifkan webproxy, menu IP>Proxy>Access>Setting ( check box enable)
2. Setting web proxy
3. Buat rule untuk transparent dengan cara redirect
Selanjutnya untuk memblock situs sebagai berikut :
1. Dari menu IP pilih Web Proxy >> klik tanda plus kemudian masukan situs yang akan diblock
Untuk mencoba silahkan buka browser trus ketik kata porno, harusnya tampil seperti ini.
Met nyoba aja. Sori kalo banyak lirik musik yang berserliweran ngga jelas..
17 responses to “Transparent Proxy server dan blok situs menggunakan mikrotik.”
adib
Maret 23rd, 2010 pukul 09:18
mas…client pake dhcp..dan sdh blokir situs menggunakan tuts diatas, dan berhasil…klo misalkan ada range ip yg kita loss atau tidak di blokir, gmn caranya?
best regards
sigit
Maret 25th, 2010 pukul 07:08
itu harus satu2, kita tinggal nambahin setting di web proxy rule, misalkan masukan untuk src address = 192.168.0.1 dst address = 0.0.0.0 check list pada URl *facebook* method = any action allow, taruh rule ini paling atas biar alamt 192.168.0.1 bisa buka fesbuk..
Arianto
Juni 19th, 2010 pukul 15:14
terima kasih pak ilmunya, sangat bermanfaat & sudah saya aplikasikan
ttw
Agustus 28th, 2010 pukul 12:44
thank, sangat bermanfaat
http://Www.Thisnext.com
Mei 23rd, 2013 pukul 12:04
I am regular reader, how are you everybody? This paragraph posted at this site is actually nice.
Dale
Mei 24th, 2013 pukul 05:57
Great article. I am going through some of these issues
as well..
lives sex chat
Mei 27th, 2013 pukul 21:47
I visit each day a few web sites and information sites to
read articles, except this website provides quality based articles.
Elida
Mei 28th, 2013 pukul 08:35
Good day! This is my first visit to your blog! We are a team
of volunteers and starting a new initiative in a community
in the same niche. Your blog provided us valuable information to work on.
You have done a outstanding job!
Live sex channal
Mei 30th, 2013 pukul 22:49
My brother suggested I might like this blog.
He was totally right. This post actually made my day.
You cann’t imagine just how much time I had spent for this information! Thanks!
Coda.Fm
Juni 3rd, 2013 pukul 18:07
Ahaa, its good conversation regarding this
article here at this website, I have read all that, so
at this time me also commenting at this place.
intensedebate.com
Juni 8th, 2013 pukul 02:39
When someone writes an article he/she retains the plan of a user in his/her mind that how a user can know
it. So that’s why this paragraph is perfect. Thanks!
free live sex chat nude
Juni 8th, 2013 pukul 05:04
It’s actually a great and useful piece of info. I am satisfied that you just shared this helpful information with us. Please keep us up to date like this. Thanks for sharing.
live porn free
Juni 8th, 2013 pukul 05:49
you are in point of fact a just right webmaster. The web site loading pace is incredible.
It seems that you are doing any distinctive trick.
In addition, The contents are masterpiece. you’ve done a great process on this matter!
free live Sex on Cam
Juni 8th, 2013 pukul 05:54
Thankfulness to my father who told me on the topic of this website, this
website is actually amazing.
live sex on video
Juni 8th, 2013 pukul 23:00
Hello, i read your blog occasionally and i own a
similar one and i was just wondering if you get a lot of spam remarks?
If so how do you reduce it, any plugin or anything you can
suggest? I get so much lately it’s driving me crazy so any help is very much appreciated.
live cams for free
Juni 12th, 2013 pukul 10:42
Quality articles or reviews is the main to invite the people to visit the web page, that’s what this web page is providing.
free sex cam free
Juli 1st, 2013 pukul 10:25
Definitely imagine that which you said. Your favorite justification appeared to be at the web the simplest thing to take into account of.
I say to you, I definitely get annoyed at the same time as other people consider
issues that they plainly don’t know about. You controlled to hit the nail upon the highest and also outlined out the whole thing with no need side effect , other people can take a signal. Will probably be again to get more. Thank you