Project

General

Profile

Actions

Bug #11464

closed

Requests to ``ews.netgate.com`` do not honor proxy configuration

Added by Florian Apolloner 8 months ago. Updated 8 months ago.

Status:
Resolved
Priority:
Normal
Category:
Web Interface
Target version:
Start date:
02/19/2021
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:
Default
Affected Version:
2.4.5-p1
Affected Architecture:
All

Description

Our firewall rejects requests to ews.netgate.com, and we have configured a proxy in pfsense via "System -> Advanced -> Miscellaneous". The proxy does work and we see requests to files00.netgate.com going through the proxy. But (at least) whenever we open pkg_mgr_install.php?id=firmware we also see an unproxied request to ews.netgate.com.

Doing a quick grep for ews.netgate.com yields https://github.com/pfsense/pfsense/blob/5e3df7f44bc95dd33eb375e54b6120fbfee05724/src/etc/inc/pkg-utils.inc#L1613-L1629 among others and that does not seem to use a proxy (CURLOPT_PROXY missing?).

Actions #1

Updated by Jim Pingle 8 months ago

  • Assignee set to Steve Beaver
  • Target version set to CE-Next
Actions #2

Updated by Steve Beaver 8 months ago

  • Status changed from New to Feedback
  • Assignee changed from Steve Beaver to Florian Apolloner

Fixed by adding proxy configuration to web service calls. Thanks!

Actions #3

Updated by Steve Beaver 8 months ago

  • % Done changed from 0 to 100
Actions #4

Updated by Florian Apolloner 8 months ago

Thank you for the quick turnaround Steve; I'll be back in office starting February and will verify it then.

Actions #5

Updated by Florian Apolloner 8 months ago

Steve Beaver wrote:

Applied in changeset 2cb3c56db2366c9cadb04757bd3143ea0d7e7378.

I can confirm that this fixes it for us.

Actions #6

Updated by Jim Pingle 8 months ago

  • Status changed from Feedback to Waiting on Merge
  • Target version changed from CE-Next to 2.5.1
Actions #7

Updated by Renato Botelho 8 months ago

  • Status changed from Waiting on Merge to Feedback

Cherry-picked to RELENG_2_5_1

Actions #8

Updated by Jim Pingle 8 months ago

  • Subject changed from Requests to ews.netgate.com ignoring proxy configuration to Requests to ``ews.netgate.com`` do not honor proxy configuration

Updating subject for release notes.

Actions #9

Updated by Viktor Gurov 8 months ago

  • Status changed from Feedback to Resolved

works as expected on 2.5.1.r.20210314.2256:

I see

1615906367.585    560 192.168.88.71 NONE/200 0 CONNECT ews.netgate.com:443 - HIER_DIRECT/208.123.73.93 -

entries in my proxy logs

Actions

Also available in: Atom PDF