Boa tarde galera do underlinux,
Eu li muito topicos e sempre tirando umas duvidas mais nada o proxy paralelo funcionar correto.
Ele da umas travadas quando vai abrir as paginas, e quando eu baixo um arquivo.. tem vez que vem a 1,2mb/s tem vez q vem a taxa normal.. de donwloads.
O meu mikrotik eh a famosa 2.9.27 cracked
Um AMD Durom de 900mhz 512MB HD 10gb
e fiz a seguinte conf...
Renomeie as interfaces
EthClientes
EthModem
EthDebian
/ ip address
192.168.10.1/24 - EthClientes
192.168.0.1/24 - EthModem
192.168.20.1/24 - EthDebian
/ ip routes
GW: 192.168.0.1
/ ip firewall filter
add chain=input in-interface=EthModem protocol=tcp dst-port=3128 action=drop comment="BLOQUEIO DE PROXY EXTERNO" disabled=no
/ip firewall magle
/ ip firewall mangle
add chain=output protocol=tcp src-port=3128 content="X-Cache: HIT" action=mark-connection new-connection-mark=squid-connection-HIT passthrough=yes \
comment="CACHE FULL SQUID-DEBIAN" disabled=no
add chain=output connection-mark=squid-connection-HIT action=mark-packet new-packet-mark=squid-packet-HIT passthrough=yes comment="" disabled=no
add chain=prerouting p2p=all-p2p action=mark-connection new-connection-mark=P2P-Conexao passthrough=yes comment="CONTROLE P2P" disabled=no
add chain=prerouting protocol=tcp tcp-flags=syn p2p=all-p2p connection-limit=15,24 action=mark-connection new-connection-mark=P2P-Conexao-Limite \
passthrough=yes comment="" disabled=no
add chain=prerouting connection-mark=P2P-Conexao action=mark-packet new-packet-mark=P2P-Pacotes passthrough=no comment="" disabled=no
add chain=prerouting connection-mark=P2P-Conexao-Limite action=mark-packet new-packet-mark=P2P-Pacotes passthrough=no comment="" disabled=no
/ip firewall nat
/ ip firewall nat
add chain=srcnat src-address=192.168.20.0/30 action=masquerade comment="Compartilha conex o com Debian" disabled=no
add chain=srcnat src-address=192.168.10.0/24 action=masquerade comment="Compartilha conex o com Clientes" disabled=no
add chain=pre-hotspot in-interface=EthClientes src-address=192.168.10.0/24 dst-address=!192.168.20.2 protocol=tcp dst-port=80 hotspot=auth action=redirect \
to-ports=3128 comment="REDIRECIONAMENTO WEBPROXY" disabled=no
/ ip web-proxy
set enabled=yes src-address=0.0.0.0 port=3128 hostname="proxy" transparent-proxy=yes parent-proxy=192.168.20.2:5128 cache-administrator="CAMPELO-NET" \
max-object-size=1KiB cache-drive=system max-cache-size=unlimited max-ram-cache-size=unlimited
/ ip web-proxy access
add src-address=192.168.10.0/24 action=allow comment="Passando Clientes para Squid" disabled=no
add action=deny comment="" disabled=no
add url="http://www.speedyzone/wsc/" action=deny comment="" disabled=no
add url="http://speedyzone/wsc/" action=deny comment="" disabled=no
add url="http://www.speedy.zone/wsc/" action=deny comment="" disabled=no
add url="speedy.zone/wsc/" action=deny comment="" disabled=no
add url="http://200.171.222.97/wsc/" action=deny comment="" disabled=no
add dst-port=23-25 action=deny comment="" disabled=no
/ ip web-proxy cache
add url=":cgi-bin \\?" action=deny comment="don't cache dynamic http pages" disabled=no
add url="https://" action=deny comment="don't cache dynamic https pages" disabled=no
/ queue tree
add name="P2P" parent=QOS packet-mark=P2P-Pacotes limit-at=128000 queue=default priority=5 max-limit=128000 burst-limit=0 burst-threshold=0 burst-time=0s \
disabled=no
add name="Cache Full Squid-Debian" parent=global-out packet-mark=squid-packet-HIT limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
Essa eh minha configuração que fiz no mikrotik... tudo esta minando certinho ele controla p2p, os jogos. Mais cache full de alguns programas naum esta funcionando. em seguida vo posta o a configuração de debian