Welcome, Guest. Please login or register.
Did you miss your activation email?
Friday 13 December 2024, 01:42:37 pm

Login with username, password and session length

Visit the Official Endian Reference Manual  HERE
14261 Posts in 4377 Topics by 6517 Members
Latest Member: Sandro
Search:     Advanced search
+  EFW Support
|-+  Support
| |-+  EFW SMTP, HTTP, SIP, FTP Proxy Support
| | |-+  Endian Firewall Comunity 3.2.2 - Proxy not-transparent does not work
0 Members and 2 Guests are viewing this topic. « previous next »
Pages: [1] Go Down Print
Author Topic: Endian Firewall Comunity 3.2.2 - Proxy not-transparent does not work  (Read 32414 times)
littlefishknife
Jr. Member
*
Offline Offline

Posts: 4


« on: Thursday 04 May 2017, 03:25:46 am »

I was using Endian Firewall Community 2.5.2 and have migrated onto Endian Firewall 3.2.2. As a matter of fact I have installed a start from scratch Endian Firewall 3.2.2 and then restored on it the parameters of my 2.5.2 revision: the restoration succeeded perfectly and I found everything OK when browsing my configuration.

However though all the rules in Firewall Outgoing Traffic continue to work fine, all the rules in Proxy no-transparent mode no longer wotk at all: ALL URL which should be accepted are no longer accepted: the browser (Firefox) signals: << The connexion has been rejected by the proxy server >>. The browser is properly configured to communicate through proxy.

Endian Firewall 3.2.2 is perfectly up to date, I just ugraded it, successfully, through PUTTY command efw-upgrade.

Thinking that there was, perhaps, an invisible incompatibility with the rules coming from an 2.5.2 EFW revision I have re-written ALL the rules undes EFW 3.2.2 but it did not solve the problem.

What to do ? Is is a known bug ?

Thank you by advance for any help
Logged
dda
Sr. Member
****
Offline Offline

Posts: 227


« Reply #1 on: Thursday 04 May 2017, 11:10:24 pm »

Restoration of backups rarely works.  You usually have to apply rules manually.
Logged
Dark-Vex
Sr. Member
****
Offline Offline

Posts: 105


« Reply #2 on: Thursday 04 May 2017, 11:43:35 pm »

As I now the only compatible and supported backup for the 3.2.2 it's a backup from a 3.0.5
Logged
littlefishknife
Jr. Member
*
Offline Offline

Posts: 4


« Reply #3 on: Wednesday 10 May 2017, 03:15:31 am »

I confirm that Endian Firewall Community 3.2.2 Proxy not-transparent does not work.

After having completely re-entered all the HTTP Proxy rules starting from a completely new EFW 3.2.2 installation I discovered that with 25 rules Proxy not-transparent rejects all attempts to connect to any URL. But when removing half of the rules, more specifically those with a large number of domain names specified, it works again !!!

Which is boring is that in revision EFW 2.5.2 those 25 Proxy rules are working perfectly, including those having a large number of domain names.

So what is the interest of this 3.2.2 revision Huh
Logged
Dark-Vex
Sr. Member
****
Offline Offline

Posts: 105


« Reply #4 on: Monday 15 May 2017, 06:00:31 pm »

@littlefishknife mmm I think you have duplicates domain in the ACL or domain with the dot that include some subtomain, in order to verify this try (with all the ACL/rules enabled) the following command from SSH:

squid -k check
Logged
ccruz
Jr. Member
*
Offline Offline

Posts: 7



« Reply #5 on: Thursday 18 May 2017, 06:43:02 am »

I have a similar problem, but for the the service (i think is squid) wont start.
Logged
Pages: [1] Go Up Print 
« previous next »
Jump to:  

Page created in 0.094 seconds with 19 queries.
Powered by SMF 1.1 RC2 | SMF © 2001-2005, Lewis Media Design by 7dana.com