Project

General

Profile

Bug #11464

Requests to ``ews.netgate.com`` do not honor proxy configuration

Added by Florian Apolloner about 2 months ago. Updated 28 days ago.

Status:
Resolved
Priority:
Normal
Category:
Web Interface
Target version:
Start date:
02/19/2021
Due date:
% Done:

100%

Estimated time:
Affected Version:
2.4.5-p1
Affected Architecture:
All
Release Notes:
Default

Description

Our firewall rejects requests to ews.netgate.com, and we have configured a proxy in pfsense via "System -> Advanced -> Miscellaneous". The proxy does work and we see requests to files00.netgate.com going through the proxy. But (at least) whenever we open pkg_mgr_install.php?id=firmware we also see an unproxied request to ews.netgate.com.

Doing a quick grep for ews.netgate.com yields https://github.com/pfsense/pfsense/blob/5e3df7f44bc95dd33eb375e54b6120fbfee05724/src/etc/inc/pkg-utils.inc#L1613-L1629 among others and that does not seem to use a proxy (CURLOPT_PROXY missing?).

Associated revisions

Revision 2cb3c56d (diff)
Added by Steve Beaver about 2 months ago

Fixed #11464 by adding proxy configuration to web service calls

Revision 1fa63e8d (diff)
Added by Steve Beaver about 1 month ago

Fixed #11464 by adding proxy configuration to web service calls

(cherry picked from commit 2cb3c56db2366c9cadb04757bd3143ea0d7e7378)

History

#1 Updated by Jim Pingle about 2 months ago

  • Assignee set to Steve Beaver
  • Target version set to CE-Next

#2 Updated by Steve Beaver about 2 months ago

  • Status changed from New to Feedback
  • Assignee changed from Steve Beaver to Florian Apolloner

Fixed by adding proxy configuration to web service calls. Thanks!

#3 Updated by Steve Beaver about 2 months ago

  • % Done changed from 0 to 100

#4 Updated by Florian Apolloner about 2 months ago

Thank you for the quick turnaround Steve; I'll be back in office starting February and will verify it then.

#5 Updated by Florian Apolloner about 1 month ago

Steve Beaver wrote:

Applied in changeset 2cb3c56db2366c9cadb04757bd3143ea0d7e7378.

I can confirm that this fixes it for us.

#6 Updated by Jim Pingle about 1 month ago

  • Status changed from Feedback to Waiting on Merge
  • Target version changed from CE-Next to 2.5.1

#7 Updated by Renato Botelho about 1 month ago

  • Status changed from Waiting on Merge to Feedback

Cherry-picked to RELENG_2_5_1

#8 Updated by Jim Pingle about 1 month ago

  • Subject changed from Requests to ews.netgate.com ignoring proxy configuration to Requests to ``ews.netgate.com`` do not honor proxy configuration

Updating subject for release notes.

#9 Updated by Viktor Gurov 28 days ago

  • Status changed from Feedback to Resolved

works as expected on 2.5.1.r.20210314.2256:

I see

1615906367.585    560 192.168.88.71 NONE/200 0 CONNECT ews.netgate.com:443 - HIER_DIRECT/208.123.73.93 -

entries in my proxy logs

Also available in: Atom PDF