Access List URL Redirect BUG

[moatazelmasry]

Hi all,

I think I found a bug in the url redirect in the access list.

I have a list of IPs and ports that are allowed and at the buttom is a rule that matches everything and redirects to an instructions page.

When the "User source" is specified as some user or group, the redirection rule works as expected.
But if this field is empty, this rule simply blocks all outgoing connections, even these that should pass.

Steps to produce:
- Add as the first rule in the access list some hello world web app IP
- The second rule should match everything and redirects to that web app. Set the "Source User" to be the logged in user
- As expected any typed URL in the browser will be redirected to the hello world app
- Now clean the field "source user"
-Try again, this time the connection will hang and you won't be able to access the helloworld app

[thisjun]

Could you attach your access list rule?

[moatazelmasry]

I attached the file to this message
The most important rule is number 17 which forwards any request to a specific URL
If the SrcUsername is non existant or contains "*" then the forwarding hangs
If an actual username or groupname is there, the forwarding works fine

Cheers,
Moataz

[thisjun]

Please add one more rule that allow packet from redirect site.

[moatazelmasry]

Many thanks. This solved my problem!!!!!