Project

General

Profile

Actions
Copy link

Bug #11464

closed

Requests to ``ews.netgate.com`` do not honor proxy configuration

Added by Florian Apolloner about 3 years ago. Updated about 3 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Florian Apolloner
Category:
Web Interface
Target version:
2.5.1
Start date:
02/19/2021
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:
Default
Affected Version:
2.4.5-p1
Affected Architecture:
All

Description

Our firewall rejects requests to ews.netgate.com, and we have configured a proxy in pfsense via "System -> Advanced -> Miscellaneous". The proxy does work and we see requests to files00.netgate.com going through the proxy. But (at least) whenever we open pkg_mgr_install.php?id=firmware we also see an unproxied request to ews.netgate.com.

Doing a quick grep for ews.netgate.com yields https://github.com/pfsense/pfsense/blob/5e3df7f44bc95dd33eb375e54b6120fbfee05724/src/etc/inc/pkg-utils.inc#L1613-L1629 among others and that does not seem to use a proxy (CURLOPT_PROXY missing?).

Actions
Copy link
 #1

Updated by Jim Pingle about 3 years ago

  • Assignee set to Anonymous
  • Target version set to CE-Next
Actions
Copy link
 #2

Updated by Anonymous about 3 years ago

  • Status changed from New to Feedback
  • Assignee changed from Anonymous to Florian Apolloner

Fixed by adding proxy configuration to web service calls. Thanks!

Actions
Copy link
 #3

Updated by Anonymous about 3 years ago

  • % Done changed from 0 to 100
Actions
Copy link
 #4

Updated by Florian Apolloner about 3 years ago

Thank you for the quick turnaround Steve; I'll be back in office starting February and will verify it then.

Actions
Copy link
 #5

Updated by Florian Apolloner about 3 years ago

Steve Beaver wrote:

Applied in changeset 2cb3c56db2366c9cadb04757bd3143ea0d7e7378.

I can confirm that this fixes it for us.

Actions
Copy link
 #6

Updated by Jim Pingle about 3 years ago

  • Status changed from Feedback to Waiting on Merge
  • Target version changed from CE-Next to 2.5.1
Actions
Copy link
 #7

Updated by Renato Botelho about 3 years ago

  • Status changed from Waiting on Merge to Feedback

Cherry-picked to RELENG_2_5_1

Actions
Copy link
 #8

Updated by Jim Pingle about 3 years ago

  • Subject changed from Requests to ews.netgate.com ignoring proxy configuration to Requests to ``ews.netgate.com`` do not honor proxy configuration

Updating subject for release notes.

Actions
Copy link
 #9

Updated by Viktor Gurov about 3 years ago

  • Status changed from Feedback to Resolved

works as expected on 2.5.1.r.20210314.2256:

I see 

1615906367.585    560 192.168.88.71 NONE/200 0 CONNECT ews.netgate.com:443 - HIER_DIRECT/208.123.73.93 -

entries in my proxy logs

Actions
Copy link

Also available in: Atom PDF