Access List - MikroTik RouterOS v2.9 Reference Manual

increase speed more than your want to save bandwidth you should leave this low
max-ram-cache-size ( none | unlimited | integer : 0 ..4294967295 ; default: none ) - specifies the
maximal RAM cache size, measured in kibibytes
parent-proxy ( IP address | port ; default: 0.0.0.0:0 ) - IP address and port of another HTTP proxy
to redirect all requests to (exceptions may be defined in the "direct access" list
• 0.0.0.0:0 - no parent proxy is used
port ( port ; default: 8080 ) - TCP port the proxy server will be listening on. This is to be specified
on all clients that want to use the server as HTTP proxy. Transparent (with zero configuration for
clients) proxy setup can be made by redirecting HTTP requests to this port in IP firewall using
destination NAT feature
src-address ( IP address ; default: 0.0.0.0 ) - the web-proxy will use this address connecting to the
parent proxy or web site.
• 0.0.0.0 - appropriate src-address will be automatically taken from the routing table
Notes
The web proxy listens to all IP addresses that the router has in its IP address list.
Example
To enable the proxy on port 8000:
[admin@MikroTik] ip proxy> set enabled=yes port=8000
[admin@MikroTik] ip proxy> print
parent-proxy: 0.0.0.0:0
cache-administrator: "dmitry@mikrotik.com"
max-disk-cache-size: none
max-ram-cache-size: 100000KiB
cache-only-on-disk: yes
maximal-client-connections: 1000
maximal-server-connections: 1000
max-object-size: 2000KiB
max-fresh-time: 3d
[admin@MikroTik] ip proxy>

Access List

Home menu level: /ip proxy access
Description
Access list is configured like a regular firewall rules. Rules are processed from the top to the
bottom. First matching rule specifies decision of what to do with this connection. There is a total of
6 classifiers that specify matching constraints. If none of these classifiers is specified, the particular
rule will match every connection.
If connection is matched by a rule, action property of this rule specifies whether connection will be
allowed or not. If the particular connection does not match any rule, it will be allowed.
Page 532 of 695
Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
enabled: yes
src-address: 0.0.0.0
port: 8000
cache-drive: system