This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[8.2] Web Security - Web Filtering allowed networks

Hi,
after the update to version 8.2 the Web Filtering (HTTP proxy) seams to have a bug.

The proxy is only configured for the internal network in transparent mode. In the configuration tab 'Advanced' in the section 'Transparent mode skiplist' are some internet hosts that will be skipped.
On a second interface is a vlan tagged network called WLAN. And in the 'Network Security' section is a firewall rule to deny erverything from that network on position 1. This configuration worked fine until the update.
Now I can reach the hosts configured in the proxy skip list from the WLAN network. Even so the WLAN is not on the allowed list from the proxy.

Regards
Daniel

This thread was automatically locked due to age.

Parents

0 dilandau over 14 years ago

Bob I agree some clarification is needed, as I may be wrong in my interpretation. One could look at the iptable rules to see what gets created when the box is checked.
Cancel
Vote Up 0 Vote Down

Cancel

0 dilandau over 14 years ago in reply to dilandau

I added a website to the transparent skip list and checked to see what rules get created and I see the following.

Chain AUTO_FORWARD (1 references)

target     prot opt source               destination         

CONFIRMED  tcp  --  209.X.X.X      0.0.0.0/0           tcp spts:1:65535 dpt:80 

CONFIRMED  tcp  --  209.X.X.X     0.0.0.0/0           tcp spts:1:65535 dpt:443 

CONFIRMED  tcp  --  0.0.0.0/0            209.X.X.X      tcp spts:1:65535 dpt:80 

CONFIRMED  tcp  --  0.0.0.0/0            209.X.X.X      tcp spts:1:65535 dpt:443

I'm not an iptables expert but it looks like rules are created to allow access to the site as source and destination. This is on 8.103

Reply

0 dilandau over 14 years ago in reply to dilandau

I added a website to the transparent skip list and checked to see what rules get created and I see the following.

Chain AUTO_FORWARD (1 references)

target     prot opt source               destination         

CONFIRMED  tcp  --  209.X.X.X      0.0.0.0/0           tcp spts:1:65535 dpt:80 

CONFIRMED  tcp  --  209.X.X.X     0.0.0.0/0           tcp spts:1:65535 dpt:443 

CONFIRMED  tcp  --  0.0.0.0/0            209.X.X.X      tcp spts:1:65535 dpt:80 

CONFIRMED  tcp  --  0.0.0.0/0            209.X.X.X      tcp spts:1:65535 dpt:443

I'm not an iptables expert but it looks like rules are created to allow access to the site as source and destination. This is on 8.103

Children

No Data