So far, easy.Īll hosts on LAN are essentially connected to ether2-master-local interface on the MikroTik router. To get out of this network to the internet, all hosts route through the MikroTik box, which is every host's default gateway.

One of the machines on this LAN is the Squid box. There is one LAN segment with multiple hosts on this /24 network. Squid inĪnd tproxy), but none of them had the complete solution. There are some pages on the web that describe somewhat similar setups (e.g. My router is a MikroTik RB750GL - a great little device! However, my setup is slightly more involved due to the fact that my Squid box is not my router. TPROXY version 4.1+ Support document on official Squid web site. Squid Tproxy support is described in quite a bit of detail in Feature: Also, Android (as of 4.4.4) does not support auto proxy configuration. Previously, all the hosts on my network would use auto proxy config (DHCP or DNS), but that is insecure and requires additional steps to configure on every host.

Mikrotik iptables