Date: Sat, 8 Oct 2011 00:09:01 +0100 From: Greg Hennessy <Greg.Hennessy@nviz.net> To: "Spenst, Aleksej" <Aleksej.Spenst@harman.com>, "'freebsd-pf@freebsd.org'" <freebsd-pf@freebsd.org> Subject: RE: How to block HTTP packets going to 0.0.0.0 via proxy Message-ID: <9EB23F6C23A8B6488E8BCC92A48E83261280798259@PEMEXMBXVS04.jellyfishnet.co.uk.local> In-Reply-To: <20290C577F743240B5256C89EFA753810D28E8E174@HIKAWSEX01.ad.harman.com> References: <20290C577F743240B5256C89EFA753810D28E8E174@HIKAWSEX01.ad.harman.com>
next in thread | previous in thread | raw e-mail | index | archive | help
If you have no access to the gateway system, the only other alternative is a client side configuration, either use a PAC file or browser exception or routing statement to send traffic elsewhere. Greg > -----Original Message----- > From: owner-freebsd-pf@freebsd.org [mailto:owner-freebsd- > pf@freebsd.org] On Behalf Of Spenst, Aleksej > Sent: 08 October 2011 2:11 AM > To: 'freebsd-pf@freebsd.org' > Subject: How to block HTTP packets going to 0.0.0.0 via proxy > > Hi, > > my browser goes online via proxy. > So, when I type http://0.0.0.0 in my browser I see in wireshark the following: > > Source Destination Protocol Info > 172.16.102.100 172.16.2.17 HTTP GET http://0.0.0.0/ HTTP/1.1 > > That is the http GET request with the 0.0.0.0 IP address is sent to my proxy > 172.16.2.17. > I do not want these requests to go to proxy. How can I block such requests > with pf rules? > > I could easily write a rule to block all packets directly going to IP 0.0.0.0, but in > case with proxy, I don't know how to block such requests. > > Thanks for any help. > > Regards, > Aleks. > _______________________________________________ > freebsd-pf@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-pf > To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9EB23F6C23A8B6488E8BCC92A48E83261280798259>