My Blog

1. IP Address
2. Gateway
3. DNS
4. NAT
5. Proxy + transparent rules

Step 1

[admin@MikroTik] > ip address add interface=ether1 address=”your public ip” \

disabled=no

[admin@MikroTik] > ip address add interface=ether2 address=”your lan ip” \

disabled=no


Step 2

[admin@MikroTik] > ip route add gateway=”your gateway ip” disabled=no


Step 3

[admin@MikroTik] > ip dns set primary-dns=”your isp primary dns” \

secondary-dns=”your isp secondary dns” \

allow-remote-requests=yes


Step 4

[admin@MikroTik] > ip firewall nat add chain=srcnat out-interface=ether1 \

action=masquerade disabled=no


Step 5

[admin@MikroTik] > ip web-proxy set port=8080 hostname=host.yourdomain.com \

transparent-proxy=yes \

cache-administrator=support@yourdomain.com enabled=yes

[admin@MikroTik] > ip firewall nat add chain=dstnat protocol=tcp dst-port=80 \

action=redirect to-ports=8080 disabled=no \

comment=”transparent proxy”

[admin@MikroTik] > ip firewall nat add chain=dstnat protocol=tcp dst-port=3128 \

action=redirect to-ports=8080 disabled=no

[admin@MikroTik] > ip firewall nat add chain=dstnat protocol=tcp dst-port=8080 \

action=redirect to-ports=8080 disabled=no