PDA

View Full Version : Directing Web Proxy to https://


datajockeys
10-22-2008, 12:38 PM
I am getting all kinds of weirdness trying to proxy to internal https:// addressed sites. Symptoms range from:
"The requested resource (/ui/) is not available."
to
"The requested resource (/public/checklogin.htm) is not available." after completing the service login screen.

Both are https:// or port 443 based services.

ANyone else having these issues?

I forgot to mention this is UT 5.3

mdh
10-22-2008, 12:55 PM
What port is Untangle remote admin on?

datajockeys
10-22-2008, 01:11 PM
What port is Untangle remote admin on?

443?

mdh
10-22-2008, 01:17 PM
Move Untangle remote admin. That also moves access to the portal, quarantine, and reports. Untangle is likely intercepting them.

datajockeys
10-22-2008, 06:02 PM
Move Untangle remote admin. That also moves access to the portal, quarantine, and reports. Untangle is likely intercepting them.

No workie.

mdh
10-22-2008, 09:11 PM
Access them with something like https://yourip:4443 and https://yourip:3443 and https://yourip:2443 and route 4443 to private IP#1, 3443 to private IP#2, 2443 to private IP#3, each of those with destination port 443.

datajockeys
10-22-2008, 09:19 PM
Access them with something like https://yourip:4443 and https://yourip:3443 and https://yourip:2443 and route 4443 to private IP#1, 3443 to private IP#2, 2443 to private IP#3, each of those with destination port 443.

I tried changing the UT remote admin IP address already. What good is making all of these changes going to do?

This is becoming more of a pain than it is worth...

mdh
10-22-2008, 09:23 PM
Since you haven't said anything about the way your network is setup, your addressing, or port forwarding, all we can do is grasp for straws. I'm really not good at mindreading.

datajockeys
10-22-2008, 09:30 PM
The UT box is the main router. No fancy proxying stuff.

I enter the IP and service I want in the menu and it should work. Am I wrong?
All of my regular IP links work.

UT has access to my router, you are welcome to check it out...

sky-knight
10-23-2008, 01:11 AM
Umm... ok...

I'm still unclear as to what the problem is.... what I see is troubleshooting on port forwarding but the topic says proxy. Please clarify.

datajockeys
10-23-2008, 07:03 AM
Umm... ok...

I'm still unclear as to what the problem is.... what I see is troubleshooting on port forwarding but the topic says proxy. Please clarify.

Yea! Someone is actually reading the question!

Forum: Remote Access Portal
Title of Post: Directing Web Proxy to https://

Nothing wrong with http:// based menu entries. Just getting https:// to work.

Tested entries locally and they do work. Just portal is scrambling up the connection somehow.

There is not much forum traffic on Portal and the documentation is kinda vauge.

I guess the question is: Can you set up a menu item usin Web Proxy and actually get https:// connections to work on it?

sky-knight
10-23-2008, 10:52 AM
I'm still lost on your direction and it's keeping me from wrapping my brain around this...

Remote Access portal *is* a proxy, so when you say "web proxy" are you referring to the feature in RAP that allows you to put in a web page? In this case a secure one?

datajockeys
10-23-2008, 12:05 PM
I'm still lost on your direction and it's keeping me from wrapping my brain around this...

Remote Access portal *is* a proxy, so when you say "web proxy" are you referring to the feature in RAP that allows you to put in a web page? In this case a secure one?

YES!

sky-knight
10-23-2008, 12:13 PM
Ok, so you're trying to access an https item via the RAP and it is giving you grief?

Is said application sharepoint or Owa? Proxies by definition cannot work with AJAX enabled web interfaces. Or is this an external site?

datajockeys
10-23-2008, 02:24 PM
Ok, so you're trying to access an https item via the RAP and it is giving you grief?

Is said application sharepoint or Owa? Proxies by definition cannot work with AJAX enabled web interfaces. Or is this an external site?

I don't think so. One app is Paessler. It is a network monitoring system.

The other is VMWare management on my main server.

PS: Thanks foe engaging me on this.

sky-knight
10-23-2008, 02:39 PM
Well I have https://10.10.10.10 in my RAP which points at the secure web service on my ESXi box. That seems to be working fine...

On the same token when I setup https://192.168.1.5/owa to enabled RAP to work with Exchange 2007 OWA it "worked" in that the page was there. But the style sheet information was mostly garbled, and all the ajax controls went haywire... Which is expected with a proxy in the middle of such things. It's kinda hard to have client side code running into server side code when you have a 3rd party in the middle.

sky-knight
10-23-2008, 02:41 PM
Ok, correction the VMWare console site doesn't work... it has ajax components and will puke the instant I click on ANY link.

datajockeys
10-23-2008, 05:11 PM
So are we looking at a bug here or just a limitation of the module? 1/2 my services use this technology.

Looks like I am back to drilling ports into my firewall and keeping a list.