This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Mojave and the new NEWS application

Hi folks,

I have been investigating how to allow the NEWS feature in Apple Mojave to work.

Finally tracked down an exception to add the the Apple exception

^([A-Za-z0-9.-]*\.)?icloud\.com\.?/

Now I suspect that the \.? is not required because the site appears to be a .com only.

Next trick is workout how to allow the new APP Store to access the Apple sites, the exceptions fail, the site rates as IT which I am not blocking even though some sites show as blocked, so I added a specific policy in my WEB policy about allowing IT with http/s, but no joy.

Ian



This thread was automatically locked due to age.
Parents
  • Technically, a FQDN ends with a final .     That indicates you cannot add anything after.  If you don't have it, then DNS resolution is allowed to try again adding in your own DNS domain.  That is why you can go to http://server/foo and it loads the page of http://server.mycompany/foo .  But if you did http://server./foo it could not.

    Therefore https://www.google.com./search?q=cat works in your browser.  Which is why all the exception regex includes .? at the end because that is an optional final period.

  • Hi Michael,

    thank you for the explanation. I tried the 17.0.0.0 exception it added no value. I think the issue is port based, just I have not been able to identify which port. I have tried a couple but again they did not work.

    Still looking at the various XG logs as I try to connect.

    Ian

  • Hi foks,

    finally worked out how to provide access to the Apple APP store in Mojave. I have added the following to the APPLE exceptions in the WEB tab.

     
    Apple Update
    Allows Apple Update without content scanning side effects.
    Matching URLs:
    ^([A-Za-z0-9.-]*\.)?apple\.com\.?/
    ^([A-Za-z0-9.-]*\.)?cdn-apple\.com\.?/
    ^([A-Za-z0-9.-]*\.)?icloud\.com\.?/
    ^([A-Za-z0-9.-]*\.)?mzstatic\.com\.?/
    HTTPS decryption
    Malware and content scanning
    Sandstorm
    Policy checks
     
     
    Ian
Reply
  • Hi foks,

    finally worked out how to provide access to the Apple APP store in Mojave. I have added the following to the APPLE exceptions in the WEB tab.

     
    Apple Update
    Allows Apple Update without content scanning side effects.
    Matching URLs:
    ^([A-Za-z0-9.-]*\.)?apple\.com\.?/
    ^([A-Za-z0-9.-]*\.)?cdn-apple\.com\.?/
    ^([A-Za-z0-9.-]*\.)?icloud\.com\.?/
    ^([A-Za-z0-9.-]*\.)?mzstatic\.com\.?/
    HTTPS decryption
    Malware and content scanning
    Sandstorm
    Policy checks
     
     
    Ian
Children
No Data