[8.160][BUG][FIXED] HTTP Transparent Proxy not working for Wireless Networks

When the HTTP Proxy is set in Transparent mode, Wireless Networks will not be able to browse the web through the proxy... This is with a wireless network defined as a "Separate Zone" with correct packet filters and NAT MASQ rules defined, and the network is in the allowed network list in the Proxy configuration (in fact, this exact backup file was restored from a working 8.102 installation). I have to manually configure the proxy settings in the browser to point at the default 8080 port.

Seems like it's similar to the issue I found during the 8.100 beta.

Parents

0 67ef1d over 14 years ago

Bruce,

could you please post the files generated by the following commands:
iptables-save -c -t mangle > ipt.save.txt
ebtables -t broute -L --Lc > ebt.save.txt

also: Are your wireless clients able to browse? (i,e, do they 'bypassp' the proxy while they should be using it)?
or do they get time outs?

Thanks.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BrucekConvergent over 14 years ago in reply to 67ef1d

Bruce,

could you please post the files generated by the following commands:
iptables-save -c -t mangle > ipt.save.txt
ebtables -t broute -L --Lc > ebt.save.txt

also: Are your wireless clients able to browse? (i,e, do they 'bypassp' the proxy while they should be using it)?
or do they get time outs?

Thanks.

I should be able to post the files this evening.

No, wireless clients cannot browse at all, unless I point their browsers manually at the wireless gateway IP and port 8080. They time out otherwise.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BrucekConvergent over 14 years ago in reply to BrucekConvergent

Here are the files as requested...

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
- ebt.save.txt
- View
- Hide
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 BrucekConvergent over 14 years ago in reply to BrucekConvergent

Here are the files as requested...

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
- ebt.save.txt
- View
- Hide
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 67ef1d over 14 years ago in reply to BrucekConvergent

Thanks.

Packet counters show that the ebtables rules do not match any
packets.

We will try to reproduce this in the lab at the end of next week.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BrucekConvergent over 14 years ago in reply to 67ef1d

If it helps, I have 2 separately configured 8.162 beta systems, on different platforms, and both exhibit the same behavior.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 67ef1d over 14 years ago in reply to BrucekConvergent

If it helps, I have 2 separately configured 8.162 beta systems, on different platforms, and both exhibit the same behavior.

Confirmed, fortunately this seems to be simple to fix.
Thanks for reporting this bug!
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BrucekConvergent over 14 years ago in reply to 67ef1d

Great! Looking forward to testing the fix out.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel