Bypass Proxy for Local Addresses

All-
With the new 2.0 software, I am now able to connect my 3G iPhone to the WiFi network at work. The network uses an authenticated proxy to get external access. I can access external sites just fine now, but I can't see internal sites. The proxy settings on my work desktop give me the option to "bypass proxy server for local addresses".
Is there any way to do this on an iPhone?
Right now I need to make a choice between access only internal sites or only external sites.
Thanks!
MF

While not wanting to be a total weenie, ME TOO
After a bit of searching, the best we're going to be able to do right now is use a Proxy Auto-Config (.pac) file. I'm drawn to this conclusion from combining a lot of web searches with a peek at the "iPhone and iPod touch Enterprise Deployment Guide, Second Edition" (available at http://manuals.info.apple.com/enUS/Enterprise_DeploymentGuide.pdf, or via the Apple iPhone Enterprise support page at http://www.apple.com/support/iphone/enterprise/.
Setting the PAC file using the iPhone v2.x software is pretty direct - click the little arrow next to the network you want to configure, scroll down to the bottom where the proxy settings live. Choose "Auto" and enter the Auto-config URL.
That's the good news. The bad news is that I'm not entirely sure what that entails w.r.t. using one with the iPhone software. I'm not entirely clever enough to create such a file nor am I clever enough to know how to stick such a file onto my iPhone. I'm going to run this around my local team to see what they can come up with. If they come up with a solution (and it's simple enough for me to do AND explain), then I'll post a follow-up. Until then, good luck to you AND if you figure something out feel free to share with everyone else.
Ron

Similar Messages

How to know whether bypass proxy for local address is enabled in browser

Can anyone help me in finding out whether the check box "bypass proxy server for local address" in Internet explorer (Tools->Internet options->Connections->LAN Settings) is enabled from java plug in.
In my applet application if that checkbox is enabled then i have to throw a message saying that the checkbox is enabled.
Thanks in Advance
Regards
Vijay

We have been in discussions with Microsoft over the last few days on this issue - which is seen with Outlook 2007 versions onwards. Extract from resolution communication from Microsoft:
The issue you have raised is known as it has been reported and when you have a proxy set in Internet Explorer and “Bypass proxy settings for local addresses”, Outlook will attempt to connect to Office 365 directly – like the bypass rule would apply.
Because the direct connection is blocked in the Firewall, Outlook needs to have the connections going in Timeout before attempting to connect using the Proxy.
Your network trace proves the issue.
Microsoft have scheduled a fix for Outlook 2010 in February 2014 cumulative update. A fix for Outlook 2013 will also follow, but Outlook 2007 will not be addressed because it is in Extended Support.
There are two possible workarounds for this behaviour:
First, and I wouldn’t recommend it, is to allow Direct traffic through the Firewall to Office 365.
The advantage of this approach is that it will be done centralized and it will impact everyone immediately.
Information about the O365 IP addresses
There are two downsides to this behaviour:
1. First you need to maintain the Firewall exceptions as IP from O365 server can change without notice
2. Second, winhttp traffic may go through both proxy and direct and this can cause unforeseen behaviour.
The second approach is to use a proxy pac instead of manually setting in the proxy and the exceptions.
The advantage is that you will have centralized method to control how winhttp traffic goes and the issue will not be experienced anymore.
If a single pac does not be fit, you can configure proxy pac files for each site requirements and use an IIS server to store it.

Bypass Proxy for Local Addresses - Office 365 connection/ Outlook 2010

This is a strange one. Connectivity to Office 365 within our netwotk works fine although very slow for outlook 2010 client to initially connect. Once connected, it works ok. I have done a netwotk trace using netmon to see if i can identify
the reason for the slow startup (2 mins minumum for profile to load and for outlook to connect to exchange). The trace tell me that my local pc tries to make a direct connection to the office365 external IPs first, then tries the TMG proxy. Once it hits the
proxy, it kicks into life and works.
So it looks to me like it thinks the external IP address of office 365 is an internal address and spends it time trying all the ip addresses until it trys the proxy. At this point, the
Bypass Proxy Server for Local Addresses is ticked.
As soon as i untick this box, all traffic heads directly to the proxy and of course it connects like lighting. The exchange settings proxy is set in outlook for "on fast networks, connect using HTTP first, then connect using TCP/IP" (tick
is on) and the same for slow networks.
I cant for the life of me work out why it tries to connect directly to the external IPs first and not connect via TMG until i untick the
Bypass Proxy Server for Local Addresses
Would love any ideas that may assist.

We have been in discussions with Microsoft over the last few days on this issue - which is seen with Outlook 2007 versions onwards. Extract from resolution communication from Microsoft:
The issue you have raised is known as it has been reported and when you have a proxy set in Internet Explorer and “Bypass proxy settings for local addresses”, Outlook will attempt to connect to Office 365 directly – like the bypass rule would apply.
Because the direct connection is blocked in the Firewall, Outlook needs to have the connections going in Timeout before attempting to connect using the Proxy.
Your network trace proves the issue.
Microsoft have scheduled a fix for Outlook 2010 in February 2014 cumulative update. A fix for Outlook 2013 will also follow, but Outlook 2007 will not be addressed because it is in Extended Support.
There are two possible workarounds for this behaviour:
First, and I wouldn’t recommend it, is to allow Direct traffic through the Firewall to Office 365.
The advantage of this approach is that it will be done centralized and it will impact everyone immediately.
Information about the O365 IP addresses
There are two downsides to this behaviour:
1. First you need to maintain the Firewall exceptions as IP from O365 server can change without notice
2. Second, winhttp traffic may go through both proxy and direct and this can cause unforeseen behaviour.
The second approach is to use a proxy pac instead of manually setting in the proxy and the exceptions.
The advantage is that you will have centralized method to control how winhttp traffic goes and the issue will not be experienced anymore.
If a single pac does not be fit, you can configure proxy pac files for each site requirements and use an IIS server to store it.

How do you bypass the proxy for local addresses? It keeps prompting me for user id and password to access an intranet page

When trying to launch an intranet web site, it won't connect. It prompts me for a user id and password. I can get to external sites, and I have already added the site into the "No proxy for" dialog box

It depends where you publish your pages.
At MobileMe you can password protect a Site in iWeb. A Site is a collection of pages. If you want to protect a single page for a single person, you have to create a Site with one page and protect it.
When publishing at a 3rd party webhost, you can password protect a page or directory in a administration panel. Check with your host. iWeb is not involved there.

JRE proxy bypass for local addresses always bypasses proxy

Hi all,
I'm currently dealing with an issue with the proxy configuration in java.
Situation: I need a proxy server to connect to the internet, and I have some addresses configured in Internet Explorer that bypass the proxy.
example of the way I configured it : *.google.com;212.115.*;62.69.179.198
The address that I am trying to reach is not in the bypass list, or in any of the excluded ranges in the bypass list.
Initially I had java configured using browser settings. I thought it did not pick up the browser settings at all.
However after configuring the proxy manually in java it was still not working.
During the research I came to the conclusion that as soon as I enable the "bypass proxy server for local addresses" in Internet Explorer, or manually in java.
The JRE client automatically bypasses the proxy and is always using "proxy=direct" . As soon as I disable that feature it starts using the proxy server.
I have no idea why this is happening ?

Your message was an eye opener for me. Thanks!
You were right, that option shouldn't be enabled. During testing I got confused and was told that option needed to be enabled to enable the exception list.
But that was a stupid assumption.
I disabled the option bypass proxy for local addresses and just filled in the exception list and now it works again.

Proxy settings (local addresses)

Hello,
I was wondering if there is a way of adding addresses to be ignored by the proxy? What I'm asking is something similar to the option you find in browsers labeled "Ignore proxy for local addresses <input_box_to_add_addresses>".
The reason why I'm asking this is because I'm using a proxy server to access internet but for Mail of Exchange I need the proxy to be bypassed otherwise it won't work.
Thanks in advance

Have now solved it myself:
1) Create system restore point
2) Uninstall mobile broadband driver and centrino ultimate-N in device manager, but keep files
3) Reboot
4) Lenovo access connections automatically connects to mobile broadband. It's then just a matter of going in there and connecting to wifi also.
Everything is working beautifully now, and switching between wifi and mobile automatically. I think it was just corrupted TCP/IP settings in one or both adaptors.
X230, Core i7, 16GB memory, 512GB Samsung 830 SSD

Bypass proxy for FQDN with private ip addresses

We have Windows 7 with IE 11
We need this IE behavior:
"to all FQDN names that resolves to local (private) ip addresses - do not use proxy."
how can we implement this?
("Bypass Proxy Server for Local Addresses" Option don't work as needed)

Hi,
Please take a check to see if the following KB article could help here:
Internet Explorer Uses Proxy Server for Local IP Address Even if the "Bypass Proxy Server for Local Addresses" Option Is Turned On
The cause: By default, only host names are checked when the Bypass proxy server for local addresses option is turned on.
The resolution here is :
To bypass a range of IP addresses or a specific domain name, specify the addresses in the proxy exception list:
In Internet Explorer, on the Tools menu, click Internet Options.
On the Connections tab, click LAN Settings.
Click Advanced, and type the appropriate information in the
Exceptions area.
Hope this may help
Best regards
Michael Shao
TechNet Community Support

Remote Desktop "Bypass RD gateway server for local addresses" no longer working in Windows 8

Hi,
After installing windows 8, it seems like the "Bypass RD gateway server for local addresses" is no longer working.
In Windows 7, when the option is checked, I could have the server name set always and the client will automatically detect whether to use the RD gateway or not. For example, from my house, if I am connecting to a computer at my work, which requires
the RD gateway, it will automatically pops up the dialog for authentication method. However, if I connect to a computer in my home network, it will just automatically connects without asking authentication for the RD gateway.
However, after installing windows 8, this does not seem to work as expected anymore. The option is checked but the Windows Security dialog pops up in both situations and so i have to either save the rdp file locally and pin it to the taskbar or switch between
disabling and enabling the RD gateway whenever I need to connect to different machines.
Is this a regression in Windows 8? Is anyone else experiencing the same issue?
Thanks

Another way to resolve this issue for me, beside of configuring RDP to connect directly to server also on unmanaged network, will be to turn the "wifi" subnet in a managed network, as the "wired" subnet is.
The differences between thoses to subnets, dynamically assigned by the same DHCP server, are:
The "wifi" is in a private IP range, the "wired" is in a public IP range
There's an ACL on the "wifi" subnet, not on the "wired"
The next step is to compare frames send/received when on the two networks. Something will likely tell for the network to be managed.
Beside, I'm still searching informations about NLA, which is responsible for setting a nework as managed or not.
Here are some clues:
http://blogs.technet.com/b/networking/archive/2010/09/08/network-location-awareness-nla-and-how-it-relates-to-windows-firewall-profiles.aspx
http://social.technet.microsoft.com/Forums/windows/en-US/49ea0a6b-9c03-407d-8e26-24a92849a282/network-location-awareness-signature?forum=w7itpronetworking
If anybody has official MS informations about NLA (A for Awareness and not Authentication), please share!

AddressProvider for local-address

I was wondering if it is possible to use the AddressProvider for local-address. For <unicast-listener> there are sub elements <adddress> and <port>. Is it possible to use address provider to set this value?
I understand the address-provider can be used under the <well-known-address> to provide list of all wka nodes dynamically. Wanted a similar option to set the local port as well.
Edited by: 798623 on Oct 5, 2010 9:12 AM

I'm afraid there is no "pluggable" capability for selecting local hostname and port.
Can you elaborate a bit more as to why you would need this capability?
/Christer

GWIA doing DNS lookup for local address

Hello,
I am running GW8.0.2 on Netware 6.5sp8. I have a server that our recreation department uses to send out confirmation emails when a customer signs up for a class. The recreation server and the GWIA are on the same subnet.
Here's the problem: When the Rec server sends out the first email confirmation, it gets sent out successfully. Subsequent emails after that fail. After about twenty minutes the next email will go out OK again but subsequent emails will fail.
The verbose logs on the GWIA don't tell me much but the diagnostic logs show what looks like a reverse DNS lookup happening at the GWIA for my local IP address of 10.0.0.3 (the Rec server). This reverse DNS lookup fails (probably a timeout) and subsequent emails from this local Rec server get dropped by the GWIA without the DNS lookup.
DNS is being done by DNS proxy on Bordermanager 9.2. I've bypassed the Bordermanager DNS and the same thing happens. I've made entries for the local Rec server into a route.cfg file but the GWIA seems to want to ignore these entries and keeps doing the DNS lookup.
The wierdest part of the puzzle is that if I restart the proxy on the Bordermanager the next email will go out with, of course, subsequent emails failing. I've looked at the proxy dns cache and can't even find an entry for my Rec server.
Attached are the entries from the Diagnostic logs of the GWIA. Novell tech support has assured me that the GWIA and the BM are working fine. I am also having this problem with a scanner that scans then emails but all other email and Bordermanager are functioning fine. This server and scanner were not having this problem before upgrading to GW8.0.2.
I don't understand why GWIA is doing DNS lookups for a local address and I don't know what I can do to stop it. Any help would be greatly appreciated.
This is a successful transfer right after restarting the proxy: 10.0.0.3 is the Rec server, 10.0.0.130 is the GWIA and 10.0.0.1 is the Bordermanager.
16:04:13 D15 NgwResQuery(3.0.0.10.in-addr.arpa, 1, 12)
16:04:13 D15 Querying server (# 1) address = 10.0.0.1
16:04:13 D15 HEADER:
16:04:13 D15 opcode = QUERY, id = 17615, rcode = SERVFAIL, flags: qr aa rd
16:04:13 D15 query = 1, answer = 0, authority = 0, additional = 0
16:04:13 D15
16:04:13 D15 QUESTIONS:
16:04:13 D15 3.0.0.10.in-addr.arpa, type = PTR, class = IN
16:04:13 D15
16:04:13 D15 rcode = 2, ancount=0
16:04:13 D15 NgwResQuery failed
16:04:13 D15 DMN: MSG 2000909 Accepted connection: [10.0.0.3] ()
16:04:13 D15 Successful login with client/server access: 10.0.0.130:1677
16:04:13 D15 DMN: MSG 2000909 Receiving file: ECMAIL/SYS:\PROGRAMS\GRPWISE\WPGATE\GWIA\3RD\receive\df30 fad4.221
16:04:13 D15 DMN: MSG 2000909 SMTP session ended: [10.0.0.3] ()
This is an unsuccessful transfer:
16:06:08 D04 timeout
16:06:08 D04 NgwResQuery: send error
16:06:08 D04 NgwResQuery failed
16:06:08 D04 DMN: MSG 2000933 Accepted connection: [10.0.0.3] ()
16:06:08 D04 DMN: MSG 2000933 SMTP session ended: [10.0.0.3] ()
Then the successful email comes back into the system:
16:06:26 AA8 MSG 2000909 Processing inbound message: ECMAIL/SYS:\PROGRAMS\GRPWISE\WPGATE\GWIA\receive\DF30FAD4 .221
16:06:26 AA8 MSG 2000909 Sender: [email protected]
16:06:26 AA8 MSG 2000909 Recipient: [email protected]
16:06:26 AA8 MSG 2000909 Queuing to MTA
16:06:26 AA8 MSG 2000909 File: ECMAIL/SYS:\PROGRAMS\GRPWISE\WPGATE\GWIA\wpcsin\4\4daf048 2.8m1 Message Id: (4DAF66F2.B67:244:35687) Size: 163.3 Kb

Thanks Massimo. I could have swore I already did that but when I did it again just to make sure it solved the problem. Appreciate the help. Have a good one.
Originally Posted by mrosen
On 02.05.2011 21:06, avanrav wrote:
>
> Hello,
>
> I am running GW8.0.2 on Netware 6.5sp8. I have a server that our
> recreation department uses to send out confirmation emails when a
> customer signs up for a class. The recreation server and the GWIA are on
> the same subnet.
>
> Here's the problem: When the Rec server sends out the first email
> confirmation, it gets sent out successfully. Subsequent emails after
> that fail. After about twenty minutes the next email will go out OK
> again but subsequent emails will fail.
>
> The verbose logs on the GWIA don't tell me much but the diagnostic logs
> show what looks like a reverse DNS lookup happening at the GWIA for my
> local IP address of 10.0.0.3 (the Rec server). This reverse DNS lookup
> fails (probably a timeout) and subsequent emails from this local Rec
> server get dropped by the GWIA without the DNS lookup.
>
> DNS is being done by DNS proxy on Bordermanager 9.2. I've bypassed the
> Bordermanager DNS and the same thing happens. I've made entries for the
> local Rec server into a route.cfg file but the GWIA seems to want to
> ignore these entries and keeps doing the DNS lookup.
>
> The wierdest part of the puzzle is that if I restart the proxy on the
> Bordermanager the next email will go out with, of course, subsequent
> emails failing. I've looked at the proxy dns cache and can't even find
> an entry for my Rec server.
The reverse DNS done by GWIA is normal, and can't be stopped or tricked.
That it fails in such odd ways must be a bug with the reverse DNS proxy
of Bordermanager though. Apparently on the second lookups, it doesn't
answer in a timely manner (the type of answer is irrelevant, just it
*has* to answer). Use a different, "real" DNS server for your GWIA.
CU,
Massimo Rosen
Novell Product Support Forum Sysop
No emails please!
Untitled Document

Bypass proxy for certain sites

ls,
Can I configure BM in such a way that it bypasses itself for certain sites?
So, rather then setting the exclusion list on every PC?
For certain sites/ip-addresses we need to go out via another gateway. I have
done this now by putting the address in the IE-bypass-proxy-exclusion-list.
But I wondered if there is a way to do this centrally, on the BM-box.
Regards,
Adrie de Regt

On 04/14/2010 09:59 AM, Adrie de Regt wrote:
> ls,
>
>
> Can I configure BM in such a way that it bypasses itself for certain sites?
> So, rather then setting the exclusion list on every PC?
>
> For certain sites/ip-addresses we need to go out via another gateway. I have
> done this now by putting the address in the IE-bypass-proxy-exclusion-list.
> But I wondered if there is a way to do this centrally, on the BM-box.
>
>
> Regards,
>
> Adrie de Regt
>
>
you can not do that on bm.
if yo do not want to add the sites to every pc, consider the use of a
proxy.pac . Tid10019233

Java doesn't bypass proxy for IPs using (IP-Subnet) combination ??

Dear All,
On Mac OS I am getting the below problem, I didn't tried it on Windows may be this problem may not occur there.
Problem:---
On Mac OS (Leopard).
When bypassing proxy IP in "Network Settings->Advanced...->Proxies->Bypass Hosts & Domains" field is given as IP-Subnet combination, e.g. 192.168.60/24, then in Java while trying to connect with HttpUrlConnection's connect() method, and then getting response code using HttpUrlConnection's getResponseCode() method it returns response code 407 i.e. Proxy is required. But safari works well for that,
This Java API works well when I directly give IP as 192.168.60.X it works (Java API) well.
I tried System.getProperties().setProperties("http.nonProxyHosts","192.168.60/24"), then also it doesn't works.
Please tell me any solution, suggestion or workaround or any document that tells it may not be done through Java API.

I think System.getProperties().setProperty("http.nonProxyHosts",any host name, IP with * or |) works well for Windows.
Now may be specifying the range of IPs using subnet on Mac OS (e.g.192.168.60/24) is different than on windows (e.g. 192.168.60/255.255.255.0) and therefore this fails on Mac OS. Although Java is given by Mac for its OS, but I think they didn't made any changes for this API.
Now the question is whether its a bug in Java Mac or there is some workaround present for that???
Do you have any idea that I am going right way or not??

Bypassing proxy for online backup service

BM 3.8.5 w/patch 1; NW 6.5.8. I'm trying to evaluate an online backup service that doesn't support proxy servers, bizarre as that may be. Is there a way to let a program on a workstation bypass the proxy server? Also, though not germane to this forum, if anyone has any suggestions for online back that are compatible with NW and BM for a small office (under 10 computers), please chime in.

On 08/07/11 15:36, JackCunha wrote:
>
> The browser is not used. There is a program on the workstation which
> tries to connect to the site online. Tthe ports required are 4282 and
> port 4280/4285, but I assume I also need to get access and get through
> the BM proxy at 192.168.1.1, and the program does not support proxies.
>
>
bm proxy is normally only for port 80/443, when using the forward proxy.
If this program access port 4282 and 4280/4285, then it depends how you
internet connection is set up. If bm is the default gateway for the
internal hosts and filters are applied, then you will need a filter
exception for this ports and enable dynamic nat to allow this traffic to
reach the internet. So bm proxy is not involved here.
If bm is not the default gateway, then this program will use the default
gateway defined on the PC to reach the internet and then is there where
you have to allow this traffic.

Bypassing proxy for certain domains

i have been advised that i can use an XML tag called <dontProxyFor> to bypass the use of a proxy server for certain host/domains in a URL-based portlet.
The node is a child node of <proxyInfo>.
i am using Portal 3.0.9.8.4 on Solaris. i have made the addition to my provider.xml but my portlets still seem to require proxy authentication ...
is this tag only support in higher versions of Portal ??
on the other hand, is there no way for us to specify a proxy user/password in the provider XML for URLservices ?

On 08/07/11 15:36, JackCunha wrote:
>
> The browser is not used. There is a program on the workstation which
> tries to connect to the site online. Tthe ports required are 4282 and
> port 4280/4285, but I assume I also need to get access and get through
> the BM proxy at 192.168.1.1, and the program does not support proxies.
>
>
bm proxy is normally only for port 80/443, when using the forward proxy.
If this program access port 4282 and 4280/4285, then it depends how you
internet connection is set up. If bm is the default gateway for the
internal hosts and filters are applied, then you will need a filter
exception for this ports and enable dynamic nat to allow this traffic to
reach the internet. So bm proxy is not involved here.
If bm is not the default gateway, then this program will use the default
gateway defined on the PC to reach the internet and then is there where
you have to allow this traffic.

Bypassing proxy for live365 radio

Ever since I started connecting to the Internet through a proxy server (filter), I haven't been able to listen to "live365" radio stations with iTunes, either the ones programmed into iTunes or otherwise.
I have tried entering various things in the "bypass" box in Network Prefs, i.e. "live365.com", "www.live365.com", "*.live365.com" but it hasn't worked! I haven't got anything I've entered into the bypass box to work.
Any ideas, suggestions, help?

On 08/07/11 15:36, JackCunha wrote:
>
> The browser is not used. There is a program on the workstation which
> tries to connect to the site online. Tthe ports required are 4282 and
> port 4280/4285, but I assume I also need to get access and get through
> the BM proxy at 192.168.1.1, and the program does not support proxies.
>
>
bm proxy is normally only for port 80/443, when using the forward proxy.
If this program access port 4282 and 4280/4285, then it depends how you
internet connection is set up. If bm is the default gateway for the
internal hosts and filters are applied, then you will need a filter
exception for this ports and enable dynamic nat to allow this traffic to
reach the internet. So bm proxy is not involved here.
If bm is not the default gateway, then this program will use the default
gateway defined on the PC to reach the internet and then is there where
you have to allow this traffic.

Bypass Proxy for Local Addresses

Similar Messages

Maybe you are looking for