Proxy Internal on Mikrotik

On this article I think many reader was knowledge Mikrotik router, and basic setting in first one. I will setting on mikrotik router for proxy internal and blocking sites. However step by step below :

step one :
setting interface no problem :
[admin@MikroTik] /interfaces>set name=publik interface=ether1
[admin@MikroTik] /interfaces>set name=local interface=ether2

step two :

setting ip address is OK :

[admin@MikroTik] /ip address>add address=192.168.15.20/24 interface=publik

[admin@MikroTik] /ip address>add address=192.168.100/26 interface=lokal

step three :

setting ip route is OK :

[admin@MikroTik] /ip routes>add distination address=0.0.0.0/0 gateway=192.168.15.1

step four :

setting ip dns is OK :

[admin@MikroTik] /ip dns>set servers=8.8.8.8,8.8.4.4

step five :

setting ip firewall nat for srcnat upline to internet

[admin@MikroTik] /ip firewall nat>add chain=srcnat action=masquerade out-interface=publik

step six :

setting web proxy internal from menu ip web proxy

[admin@MikroTik] /ip proxy>set enabled=yes port=3128 cache-on-disk=yes

step seven :

setting again on ip firewall nat for redirect user to proxy internal

[admin@MikroTik] /ip firewall nat>add chain=dstnat action=redirect to-ports=3128 protocol=tcp  dst-port=80

and the last :

setting site to block for user in ip web proxy access

[admin@MikroTik] /ip proxy access> add dst-port=80 dst-host=google.com action=deny

and now almost done.