[7.390] Bypassing https-proxy by packetfilter-rules does not work

I want a Linux-Server to be able to make http-connections without the proxy interfering.
With earlier ASG version all I needed to do was setup a packetfilter rule:
Linux-Server -> any -> http -> allow

This does not seem to work anymore as I can see in the proxy-log that the proxy still intercepts those connections.
http-connections did only have to be handled by the proxy if they could not be established directly (blocked by the packetfilter).

Did this behaviour somehow change?

Thanks for any hints,

DiePlage

0 BarryG over 16 years ago

Sounds like you have the proxy in transparent mode.

Create a proxy exclusion/exception for that server.

Barry
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 DiePlage over 16 years ago in reply to BarryG

Sounds like you have the proxy in transparent mode.

Create a proxy exclusion/exception for that server.

Barry

Thanks Barry! I didn't know that made a difference...
So when the proxy is in transparent mode it comes BEFORE the packet-filter?
Do the exceptions work for source-hosts as well? I thought that I could only add destinations here?

Guess I have do re-read that chapter in the manual :-)

Thanks!
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BarryG over 16 years ago in reply to DiePlage

Yes, proxy comes first. (it gets it's own hidden rules which go before PF etc.)

I'm pretty sure you can exclude source networks, but I don't use the proxy much.
There's lots of posts here about it though.

Barry
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Gert Hansen over 16 years ago in reply to BarryG

Hi DiePlage,

you just need to add your linux server to the transparent-skiplist under Advanced in the WebSecurity > HTTP/S section.

this bypasses this host from the transparent redirect.

hope that helps,
regards
gert
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel