Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 12 replies
  • Subscribers 1 subscriber
  • Views 4654 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Proxy url exception problem

Mark Percy
Hi,

I am trying to get this url working through the proxy:

http://minecraft.dangis.dk:8081/status.png

using this exception:

^https?://([A-Za-z0-9.-]*\.)?dangis\.dk:8081/

But despite whatever exeption-url i am trying i have not been able to get it to work.

When not using the proxy, everything works fine, so i think it has to be the exception url that is wrong. 

I am using the proxy in standard mode with SSL scanning and UTM 9.100-8.

Any help would be appreciated.

Thanks,

Mark


This thread was automatically locked due to age.
  • 0
    In Web Protection under Advanced tab add port 8081 in Allowed Target Services
  • 0
    Unfortunately it does not do the trick.
    The log file shows this:

    2013:05:01-18:50:36 PATRIOT httpproxy[9284]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.***.***.***" dstip="***.***.***.***" user="" statuscode="400" cached="0" profile="REF_HttProInternet (Limited)" filteraction="REF_HttCffConteFilteAllow2 (Content filter allow action - Hotspot)" size="663" request="0x1244a6a8" url="minecraft.dangis.dk:8081/.../html" application="http"

    2013:05:01-18:50:36 PATRIOT httpproxy[9284]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.***.***.***" dstip="***.***.***.***" user="" statuscode="400" cached="0" profile="REF_HttProInternet (Limited)" filteraction="REF_HttCffConteFilteAllow2 (Content filter allow action - Hotspot)" size="663" request="0x1244a6a8" url="minecraft.dangis.dk:8081/.../html" application="http"

    2013:05:01-18:50:36 PATRIOT httpproxy[9284]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.***.***.***" dstip="***.***.***.***" user="" statuscode="400" cached="0" profile="REF_HttProInternet (Limited)" filteraction="REF_HttCffConteFilteAllow2 (Content filter allow action - Hotspot)" size="663" request="0x1244a9a8" url="minecraft.dangis.dk:8081/.../html" application="http"

    2013:05:01-18:50:36 PATRIOT httpproxy[9284]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.***.***.***" dstip="***.***.***.***" user="" statuscode="400" cached="0" profile="REF_HttProInternet (Limited)" filteraction="REF_HttCffConteFilteAllow2 (Content filter allow action - Hotspot)" size="663" request="0x1244b480" url="minecraft.dangis.dk:8081/.../html" application="http"

    2013:05:01-18:50:36 PATRIOT httpproxy[9284]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.***.***.***" dstip="***.***.***.***" user="" statuscode="400" cached="0" profile="REF_HttProInternet (Limited)" filteraction="REF_HttCffConteFilteAllow2 (Content filter allow action - Hotspot)" size="663" request="0x1244a6a8" url="minecraft.dangis.dk:8081/.../html" application="http"

    2013:05:01-18:50:36 PATRIOT httpproxy[9284]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.***.***.***" dstip="***.***.***.***" user="" statuscode="400" cached="0" profile="REF_HttProInternet (Limited)" filteraction="REF_HttCffConteFilteAllow2 (Content filter allow action - Hotspot)" size="663" request="0x1244a6a8" url="minecraft.dangis.dk:8081/.../html" application="http"

    Regards,

    Mark
  • 0
    Hi Mark,

    do you have defined a global exception or in the profile? (I prefer the global ones)
    Have you tried a simple exception like just 'dangis.dk'? (maybe the new 9.1 regex engine does not work correctly)
    How is your result in your browser (error message? timeout? nothing?)

    Regards
    Manfred
  • 0
    Agreed with Manfred - very strange.

    ^https?://[A-Za-z0-9.-]*dangis\.dk might work - have you tried that?

    Cheers - Bob
  • 0
    Thank everybody. I give it a try when i get home from work.

    Regards,

    Mark
  • 0
    I use a global exception, and have tried several regex, but none have been working correctly.

    I can easyly get to Minecraft.dangis.dk - Velkommen! but i can not get to see the desired status page - weird...
  • 0 in reply to Mark Percy
    Hi Mark,

    I think the last / is tripping you up in: ^https?://([A-Za-z0-9.-]*\.)?dangis\.dk:8081/

    Try ^https?://([A-Za-z0-9.-]*\.)?dangis\.dk:8081 instead or even ^https?://([A-Za-z0-9.-]*\.)?dangis\.dk should work.
  • 0 in reply to TheDrew
    Hi Mark,

    I think the last / is tripping you up in: ^https?://([A-Za-z0-9.-]*\.)?dangis\.dk:8081/

    Try ^https?://([A-Za-z0-9.-]*\.)?dangis\.dk:8081 instead or even ^https?://([A-Za-z0-9.-]*\.)?dangis\.dk should work.


    Hi TheDrew

    Thanks, i will try your suggestions when i get back home tomorrow and report back.
  • 0
    Always remember to post a representative line from the log file so that others can see what you see.

    Cheers - Bob
  • 0
    Hi all,

    I have managed to solve the problem, by bypassing the proxy :-)

    I extended my original PAC file with the marked text, and that did the trick:


    function FindProxyForURL(url, host) {

    >>>>>>// If the hostname matches, send direct.
    >>>>>>    if (dnsDomainIs(host, "minecraft.dangis.dk")
    >>>>>>        return "DIRECT";
     
    // If the requested website is hosted within the internal network, send direct.
        if (isPlainHostName(host) ||
            shExpMatch(host, "*.local") ||
            isInNet(dnsResolve(host), "192.168.0.0",  "255.255.0.0") ||
            isInNet(dnsResolve(host), "127.0.0.0", "255.255.255.0"))
            return "DIRECT";
           
    // If the machine requesting a website falls within IP range,
    // send traffic via proxy 192.168.100.1 running on port 8080.
          if (isInNet(myIpAddress(), "192.168.100.0", "255.255.255.0"))
              return "PROXY 192.168.100.1:8080";
            
    // If the machine requesting a website falls within IP range,
    // send traffic via proxy 192.168.200.1 running on port 8080.
          if (isInNet(myIpAddress(), "192.168.200.0", "255.255.255.0"))
              return "PROXY 192.168.200.1:8080";

    }


    Regards,

    Mark