Proxy refuses connection to a local NAS when adding a specific port

Tripwire, Guardian, Snort, Squidclamav
Post Reply
5589DB
Posts: 140
Joined: August 4th, 2014, 7:56 pm

Proxy refuses connection to a local NAS when adding a specific port

Post by 5589DB » July 7th, 2018, 11:54 am

Hello,

I have a problem with my proxy settings and I am out of ideas. Hopefully someone can help me with that ;)

I am using a web proxy, not transparent. Firewall is set to forward blocked, outgoing allowed.

My proxy refuses connection to a local NAS in firefox when adding a specific port. E.g. https://nas/test works but connection to https://nas:5005 is refused.

What could be the problem? I have no idea anymore where to look :(

Thanks a lot!

User avatar
Arne.F
Core Developer
Core Developer
Posts: 8522
Joined: May 7th, 2006, 8:57 am
Location: BS <-> NDH
Contact:

Re: Proxy refuses connection to a local NAS when adding a specific port

Post by Arne.F » July 7th, 2018, 2:16 pm

In the default config the Proxy only allow https connections to

Code: Select all

443 # https
563 # snews
You have to add the port 5005 to the "Allowed SSL ports (one per line)" box at "Destination Ports" on the Proxy WebIF page.
Arne

Support the project on the donation!

Image

Image

Image
PS: I will not answer support questions via email and ignore IPFire related messages on my non IPFire.org mail addresses.

5589DB
Posts: 140
Joined: August 4th, 2014, 7:56 pm

Re: Proxy refuses connection to a local NAS when adding a specific port

Post by 5589DB » July 7th, 2018, 3:27 pm

Hello Arne,

thanks for your help. Now this problem seems to be solved! I do not get the refused page anymore. But why am I connected to the ipfire proxy when I set "do not use proxy für local addresses like nas ...)?

But it seems I have some more DNS issues. I can connect with it's IP but not with a DNS name. It's a strange thing, E.g. I can connect to ipfire:444 without any problems but not to nas:5005. ping nas or ipfire does not work. I have to analyze it at open a new thread for that when I have time...

Thanks again!

Post Reply