This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[8.2] Web Security - Web Filtering allowed networks

Hi,
after the update to version 8.2 the Web Filtering (HTTP proxy) seams to have a bug.

The proxy is only configured for the internal network in transparent mode. In the configuration tab 'Advanced' in the section 'Transparent mode skiplist' are some internet hosts that will be skipped.
On a second interface is a vlan tagged network called WLAN. And in the 'Network Security' section is a firewall rule to deny erverything from that network on position 1. This configuration worked fine until the update.
Now I can reach the hosts configured in the proxy skip list from the WLAN network. Even so the WLAN is not on the allowed list from the proxy.

Regards
Daniel

This thread was automatically locked due to age.

Parents

0 BAlfson over 14 years ago

Thanks, dilandau. Does the same thing happen when the Proxy is not in a transparent mode?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

0 daniel4 over 14 years ago in reply to BAlfson

Thanks, dilandau. Does the same thing happen when the Proxy is not in a transparent mode?

Yes, I've changed the proxy mode to standard and still packets are going through. If the "Allow HTTP/S traffic for listed hosts/nets" checkbox is checked.

Here is a snip of my iptables -vL

Chain AUTO_FORWARD (1 references)

 pkts bytes target     prot opt in     out     source               destination         

    0     0 CONFIRMED  tcp  --  any    any     anywhere             anywhere            match-set tCRW+zI+1diBnqF2QmhJDA dst tcp spts:tcpmux:65535 dpt:http 

    0     0 CONFIRMED  tcp  --  any    any     anywhere             anywhere            match-set tCRW+zI+1diBnqF2QmhJDA dst tcp spts:tcpmux:65535 dpt:https

Reply

0 daniel4 over 14 years ago in reply to BAlfson

Thanks, dilandau. Does the same thing happen when the Proxy is not in a transparent mode?

Yes, I've changed the proxy mode to standard and still packets are going through. If the "Allow HTTP/S traffic for listed hosts/nets" checkbox is checked.

Here is a snip of my iptables -vL

Chain AUTO_FORWARD (1 references)

 pkts bytes target     prot opt in     out     source               destination         

    0     0 CONFIRMED  tcp  --  any    any     anywhere             anywhere            match-set tCRW+zI+1diBnqF2QmhJDA dst tcp spts:tcpmux:65535 dpt:http 

    0     0 CONFIRMED  tcp  --  any    any     anywhere             anywhere            match-set tCRW+zI+1diBnqF2QmhJDA dst tcp spts:tcpmux:65535 dpt:https

Children

No Data