25/09/2015

Proxylizer/GettingStartedMikroTikWiki

Proxylizer/GettingStarted
<Proxylizer

Contents[hide]
1Download
1.1Scriptsforinstallmethod1
1.2VMwareimagedownloadforinstallmethod2
2Install
2.1Mikrotikrouter
2.1.1Webproxylogexporttoremotehost(Proxylizerserver)
2.2Proxylizerserver
2.2.1Installmethod1
2.2.1.1Requiredpackages
2.2.1.2Webpagescripts
2.2.1.3Permissionsfordirectories
2.2.1.4Syslogdaemon
2.2.1.5MySQLuserforproxylizerdatabase
2.2.1.6Scheduledscriptsforforwardingrecordsfrom
syslogtoMySQLandreportgeneration
2.2.1.7Databaseandwebpageaccessconfiguration
2.2.1.8Mailsendingconfiguration
2.2.2Installmethod2
3Firstreport

Download
Scriptsforinstallmethod1
Youcandownloadproxylizerarchivehere
VMwareimagedownloadforinstallmethod2
Thereare2waystodownloadthisimagefile(318MB):
directdownload
torrentnetwork

Install
AlltheexamplesassumethatProxylizerserverIPaddressis10.1.1.2andsyslogngusesport514thatisitsdefault
Theinstallationincludesstepsforsettingupthefollowing:
Mikrotikrouter:
Webproxylogexporttoremotehost
Proxylizerserver:
Method1
Requiredpackages
Webpagescripts
Permissionsfordirectories
Syslogdeamon
MySQLuserforproxylizerdatabase
Scheduledscriptsforforwardingrecordsandreportgeneration
Databaseandwebpageaccessconfiguration
Mailsendingconfiguration
Method2

Mikrotikrouter
Webproxylogexporttoremotehost(Proxylizerserver)
ToforwardlogsfromMikrotikRoutertoProxylizerserver,openRouterOSconsoleandtypeinthefollowingcommands(assumingthatProxylizerServerIPAddressis
10.1.1.2):
/systemloggingactionaddname=sendToProxylizertarget=remoteremote=10.1.1.2:514
/systemloggingaddtopics=webproxy,!debugaction=sendToProxylizer
Notethatlogsaresenttoportnumber514,itmustbeequalwiththeportonwhichSyslogdaemononProxylizerserverislistening.
Andthenjustsetupwebproxy:
[admin@Proxylizerpruebas]>ip[admin@Proxylizerpruebas]/ip>proxy[admin@Proxylizerpruebas]/ipproxy>print
enabled:yes
srcaddress:0.0.0.0
port:8080
parentproxy:0.0.0.0
parentproxyport:0

data:text/htmlcharset=utf8,%3Ch1%20id%3D%22firstHeading%22%20class%3D%22firstHeading%22%20lang%3D%22en%22%20style%3D%22color

1/4

25/09/2015

Proxylizer/GettingStartedMikroTikWiki

cacheadministrator:"webmaster"
maxcachesize:none
cacheondisk:no
maxclientconnections:600
maxserverconnections:600
maxfreshtime:3d
serializeconnections:no
alwaysfromcache:no
cachehitdscp:4
cachedrive:system
andredirectthetraffictothewebproxy:
[admin@Proxylizerpruebas]/ipfirewallnat>printFlags:Xdisabled,Iinvalid,Ddynamic
0chain=dstnataction=redirecttoports=8080protocol=tcpdstport=80
Note:rememberprotecttheproxy

Proxylizerserver
Installmethod1
Alltheexamplesassumethatwebpagerootdirectoryis"/var/www/proxylizer",webserveruseris"wwwdata",Proxylizerserversystemuseris"proxylizer"and.pipe
filedestination/nameis"/home/proxylizer/mysql.pipe".
Requiredpackages
Syslogng daemon
WebserverwithPHP andPHPPear
Apache2 (recomended),PHP5 ,PHP5cli andPHPPear :DB,Mail,Mail_MimeandNet_SMTPpackages
MySQL databaseserver
ForUbuntuissuethiscommandtoinstallallrequiredpackages:

sudoaptgetinstallsyslognglibapache2modphp5php5cliphppearphpdbphpmailphpmailmimephpnetsmtpphp5mysqlmysqlservermysql
WARNING:IfyouhaveUbuntusyslogngcanconflictwithubuntuminimalpackage!Youcanremovethispackage.
Webpagescripts
Downloadproxylizerarchive.Createdirectoryandextractitinwebpagerootdirectory:
sudotarxvzfproxylizer.tar.gzC/var/www/

Permissionsfordirectories
Changeownershipofwebpagerootdirectoryforwebserveruser:
chownproxylizer:wwwdata/var/www/proxylizerR
Setwritepermissionstowebpagerootdirectoryforwebserveruser:
chmodg+w/var/www/proxylizerR
Setpermissionstoexecute3shellscriptfilesforwebserverusergroup:
cd/var/www/proxylizer
chmodug+xcheckwebproxy.shmail_send.phpwebproxylogtomysql.php

Syslogdaemon
ChangesyslogngconfigtoreceivelogsfromMikrotikrouterandputthemintomysql.pipefile.Open/etc/syslogng/syslogng.confandaddtheselinesnextto
"#destinations":
destinationd_mysql{
pipe("/home/proxylizer/mysql.pipe"
template("$HOST$YEAR$MONTH$DAY$HOUR:$MIN:$SEC$MSG\n")templateescape(yes));
};
log{source(net);destination(d_mysql);};
Andthislinenextto"#sources":
sourcenet{udp();};

data:text/htmlcharset=utf8,%3Ch1%20id%3D%22firstHeading%22%20class%3D%22firstHeading%22%20lang%3D%22en%22%20style%3D%22color

2/4

25/09/2015

Proxylizer/GettingStartedMikroTikWiki

Createpipefile:
mkfifo/home/proxylizer/mysql.pipe
Setdestinationof.pipefilein/var/www/proxylizer/webproxylogtomysql.php.Atthebeginningofthefileyoumustchangevariablevalueintheline:
$MYSQL_PIPE="/home/proxylizer/mysql.pipe";
restartsyslog:
/etc/init.d/syslogngrestart
Note:ThelastversionofSyslogNGdon'tprojectthestring"webproxy,account"tothepipe,sothe$rawlog[]dependingvariablesfromthephpscriptarebadsetted.If
youusesyslogng3.1.xormorepleaseusethislinetoavoidproblem:
destinationd_mysql{
pipe("/home/proxylizer/mysql.pipe"
template("$HOST$YEAR$MONTH$DAY$HOUR:$MIN:$SECwebproxy,account$MSG\n")templateescape(yes));
};
log{source(net);destination(d_mysql);};

MySQLuserforproxylizerdatabase
Defaultusernameformysqldatabaseisrootwithnopassword.Butwerecomendtochangeitforsecurityreasons.
Tocreatenewdatabase proxylizerdb anduser proxylizer withpassword passwd connecttomysqlserver,usingcommand:
mysqluroot
andissuethefollowingcommandsinmysqlfrontend:
CREATEDATABASEproxylizerdb;
GRANTALLPRIVILEGESONproxylizerdb.*TOproxylizer@localhostIDENTIFIEDBY"password"WITHGRANTOPTION;
FLUSHPRIVILEGES;
Ifyouusemysqluserotherthanrootwithoutpassword,connecttomysqlserver,using
mysqluusrnamep
andyouwillbeaskedtoenterthemysqluser'spassword.
ScheduledscriptsforforwardingrecordsfromsyslogtoMySQLandreportgeneration
Createdirectoryforscriptlogsandsetpermesions:
sudomkdir/var/log/proxylizer
sudochownproxylizer:proxylizer/var/log/proxylizer
sudochmodu+w/var/log/proxylizer
Ifyouwanttowritelogsindifferentdirectoryyoumusteditbashscript"checkwebproxy.sh"andchange"/var/log/proxylizer"topreferreddirectory.
Puttwoscriptsincronsheduler.Firstcreatecrontabfileforwebserversystemuser:
nano/home/proxylizer/proxylizercrontab
andcopytheselines:
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
*****/var/www/proxylizer/mail_send.php>>/var/log/proxylizer/mail_send_log.log
*****/var/www/proxylizer/checkwebproxy.sh>>/var/log/proxylizer/checkwebproxy.log&
Setschedulertasksfromthisfile:
crontab/home/proxylizer/proxylizercrontab

Databaseandwebpageaccessconfiguration
Whenallprevioussettingsisset.Openwebbrowserandpointittoproxylizerserver.Firstpagemustbelikethis:

data:text/htmlcharset=utf8,%3Ch1%20id%3D%22firstHeading%22%20class%3D%22firstHeading%22%20lang%3D%22en%22%20style%3D%22color

3/4

25/09/2015

Proxylizer/GettingStartedMikroTikWiki

DBtypefornowProxylizersupportsonlyMySQL,infuturePostgreSQL,Interbaseandotherdatabaseswillbeadded
DBhostbydefault"localhost",i.e,.databaseislocatedontheProxylizerserver
DBnamebydefault"proxylizer",mustbeequalwiththeonesethere
DBusernameandpasswordasyouhavesethere
Webpageusernameandpasswordasyouprefer
Setuppageisshownalwayswhentheconfigfile config_constants.php isnotfoundintheProxylizerrootdirectory.Onsuccessfulsetuptheconfigurationiswritten
tothisfile.Configurationfilecontainsdatabaseaccessandwebpageaccessparameters,noreportorIPuserconfigurationisincluded.
Mailsendingconfiguration
Tostartreceivereportstoemail,gotoIPuserspageandadduserwithemailaddress,thentoConfigpageandconfigureMailserveraccess(anySMTPaccount
needed).
Installmethod2
Itisposibletodownloadalreadyinstalledlinux(debian)andproxylizerVMwarevirtualmachineimageanduseproxylizeronanyplatformsupportedbyVMware.
DownloadVMwareplayer .
DownloadarchivedVMwareproxylizerimage
Networksettings:
ifnotinDHCPnetworkopen/etc/network/interfacesandchangeaddress,netmask,gatewayetc.
Passwordsandusernames:
rootpassword"rootroot"
username"proxylizer",password"rootroot"
mysql:rootpassword"proxylizer"proxylizerdatabaseusername"proxylizer",password"password"
webpage:username"proxylizer",password"rootroot"

Firstreport
Firstreaddocumentationofwebinterfacehere.Ifyouwan'ttojustcheckuserswebusagecreateoncereportfordateintervalyouareinterestedinandafterafew
momentsreportwillbeready.Ifyouwan'ttoseeallusersvisiteddomainscreatedomainreport,butrememberitisonlypossibletogetreportfordateintervalwhichis
alreadypassed.Forexampleifyouwantdatafortodayreportwillbegeneratedonlytomorrow.

data:text/htmlcharset=utf8,%3Ch1%20id%3D%22firstHeading%22%20class%3D%22firstHeading%22%20lang%3D%22en%22%20style%3D%22color

4/4