Enhancement #3226

Entire Subnet and Ip Ranges Exclusion in Proxy

Added by Matteo Contoli about 6 years ago. Updated over 5 years ago.

Status:CLOSEDStart date:
Priority:NormalDue date:
Assignee:-% Done:

100%

Category:nethserver-squid
Target version:v6.7
Resolution:DUPLICATE NEEDINFO:No

Description

It would be very useful to exclude an entire subnet an ip ranges using the feature "sites without proxy". Actually this is possible only for hosts and host groups

Related issues

Related to NethServer 6 - Enhancement #3323: Add CIDR subnets and ip ranges as hosts without proxy in ... CLOSED

Associated revisions

Revision 2bd657b9
Added by Giovanni Bezicheri over 5 years ago

Entire Subnet and Ip Ranges Exclusion in Proxy. Refs #3226

Revision bb5e90f6
Added by Giovanni Bezicheri over 5 years ago

Add remote (dns hosts) exclusion in Proxy. Refs #3226

Revision 5f43ccf8
Added by Giovanni Bezicheri over 5 years ago

Some fix. Refs #3226

History

#1 Updated by Filippo Carletti about 6 years ago

Workaround:
create a fake exclusion using an host
substitute host with cidr in fwrules db

Example:

byp1=bypass-src
Description=
Host=cidr;cidr1
status=enabled

#2 Updated by Davide Principi about 6 years ago

  • Project changed from Nethgui to NethServer 6

#3 Updated by Davide Marini almost 6 years ago

It would be useful to choice even ip ranges, cause the are already defined in firewall objects.

#4 Updated by Giovanni Bezicheri over 5 years ago

  • Subject changed from Entire Subnet Exclusion in Proxy to Entire Subnet and Ip Ranges Exclusion in Proxy
  • Description updated (diff)

#5 Updated by Giovanni Bezicheri over 5 years ago

  • Category set to nethserver-squid
  • Status changed from NEW to TRIAGED
  • Assignee set to Giovanni Bezicheri
  • Target version set to v6.7
  • % Done changed from 0 to 20

#6 Updated by Giovanni Bezicheri over 5 years ago

  • Status changed from TRIAGED to ON_DEV
  • % Done changed from 20 to 30

#7 Updated by Giovanni Bezicheri over 5 years ago

  • Status changed from ON_DEV to MODIFIED
  • % Done changed from 30 to 60

#8 Updated by Giovanni Bezicheri over 5 years ago

  • Status changed from MODIFIED to ON_QA
  • Assignee deleted (Giovanni Bezicheri)
  • % Done changed from 60 to 70

Test Package: nethserver-squid-1.3.10-1.4.g5f43ccf.ns6.noarch.rpm in nethserver-testing.

Test Case:
  1. Add a subnet and and ip range in "Sites without proxy".
  2. Try to access to a server in the subnet or ip range you specify above and * ASSERT * that traffic is not filtered by proxy.

#9 Updated by Giacomo Sanchietti over 5 years ago

  • Assignee set to Giacomo Sanchietti

#10 Updated by Giacomo Sanchietti over 5 years ago

  • Related to Enhancement #3323: Add CIDR subnets and ip ranges as hosts without proxy in Proxy added

#11 Updated by Giacomo Sanchietti over 5 years ago

  • Status changed from ON_QA to VERIFIED
  • Assignee deleted (Giacomo Sanchietti)
  • % Done changed from 70 to 90

See verification of #3323

#12 Updated by Giacomo Sanchietti over 5 years ago

  • Status changed from VERIFIED to CLOSED
  • % Done changed from 90 to 100
  • Resolution set to DUPLICATE

Also available in: Atom PDF