Advertisement
mtnasution

mangle tproxy

Mar 3rd, 2015
320
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.05 KB | None | 0 0
  1. /ip firewall mangle
  2. add action=mark-packet chain=postrouting comment="======================PROXY-HIT======================" disabled=no dscp=12 new-packet-mark=proxy_hit \
  3. passthrough=no
  4. add action=mark-routing chain=prerouting comment="======================TP-PROXY======================" disabled=no dst-port=80,8080 in-interface=ether3-HOTSPOT \
  5. new-routing-mark=tproxy_rm passthrough=no protocol=tcp
  6. add action=mark-connection chain=prerouting disabled=no dst-port=80,8080 in-interface=ether2-PROXY new-connection-mark=tproxy_cm passthrough=yes protocol=tcp \
  7. src-address=!192.168.2.3
  8. add action=mark-routing chain=prerouting connection-mark=tproxy_cm disabled=no in-interface=!ether2-PROXY new-routing-mark=tproxy_rm passthrough=no
  9.  
  10. /ip route
  11. add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=192.168.2.3 routing-mark=tproxy_rm scope=30 target-scope=10
  12.  
  13. /queue tree
  14. add name="0.PROXY-HIT" parent=global packet-mark=proxy_hit priority=1 max-limit=80M
  15. - See more at: http://www.silfalink.wc.lt/2015/02/tp-proxy-mangle-mikrotik.html#sthash.m2Wi2TIK.dpuf
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement