Wierd Proxy Exception issue

darzil

Distinguished
Aug 30, 2006
23
0
18,510
I'm getting some weird proxy issues.

I'm trying to access an application at another company, which is connected via a VPN tunnel. It should not pass through the proxy server at my company.

If I add the hostname and the ip address into the proxy exceptions in IE, then it cannot access the application, coming up with a dns_server_failure error using the hostname, and a tcp_error using the IP address.

If I skip the proxy entirely, it can access the application.

I'd have expected the two actions to be functionally identical, so what might be going wrong ?

Thanks,
Chris
 

riser

Illustrious
Another company is connected to your company via VPN?

Your proxy is rerouting outside the VPN because its only recognizing a one way tunnel. When your request goes out, it his your proxy which then forwards the request on somewhere else. When you remove your proxy your request goes wherever, which is why I imagine that works.

Possibly, the other application computer isn't being registered in your DNS because its not setup to. Creating a static entry may resolve this.

I imagine if you use the IP address over the name (http://applicationserver.com = http://10.1.1.100) it may work.
 

darzil

Distinguished
Aug 30, 2006
23
0
18,510


Yes



The question is, why is it going to the proxy, when it is listed in the proxy exceptions, which should mean it doesn't.



As I stated, the IP address doesn't work when using the proxy (and with the proxy exceptions in place), but does when the proxy is disabled, so it doesn't look like a DNS error, although that is what it is reporting. It isn't the first time I've had DNS error reported in the browser, whilst nslookup works perfectly on the same address. I'm starting to wonder if IE uses some other method somehow.

Chris
 

riser

Illustrious
Are you accessing a web based application?

Make sure you have multiple entries for the proxy exception; Http://, IP address, just the name, etc.

Are you sure you have the correct address in there? Its not being changed to a different name/IP when you first go to it?
 

darzil

Distinguished
Aug 30, 2006
23
0
18,510


Well, trying to access one !

I turned on success monitoring on the firewall, so I could see the traffic passing. When I don't use a proxy, it only goes to that particular IP address, so it's not a wrong address. When I use a proxy with that IP address specified as an exception, it only goes to the proxy, and never tries the IP address directly. Other exceptions in the proxy do not seem to have the same behaviour.

Chris