Page 1 of 1

Access List URL Redirect BUG

Posted: Thu May 26, 2016 11:56 pm
by moatazelmasry
Hi all,

I think I found a bug in the url redirect in the access list.

I have a list of IPs and ports that are allowed and at the buttom is a rule that matches everything and redirects to an instructions page.

When the "User source" is specified as some user or group, the redirection rule works as expected.
But if this field is empty, this rule simply blocks all outgoing connections, even these that should pass.

Steps to produce:
- Add as the first rule in the access list some hello world web app IP
- The second rule should match everything and redirects to that web app. Set the "Source User" to be the logged in user
- As expected any typed URL in the browser will be redirected to the hello world app
- Now clean the field "source user"
-Try again, this time the connection will hang and you won't be able to access the helloworld app

Re: Access List URL Redirect BUG

Posted: Thu Jun 02, 2016 6:33 am
by thisjun
Could you attach your access list rule?

Re: Access List URL Redirect BUG

Posted: Thu Jun 02, 2016 9:36 pm
by moatazelmasry
I attached the file to this message
The most important rule is number 17 which forwards any request to a specific URL
If the SrcUsername is non existant or contains "*" then the forwarding hangs
If an actual username or groupname is there, the forwarding works fine

Cheers,
Moataz

Re: Access List URL Redirect BUG

Posted: Fri Jul 01, 2016 6:55 am
by thisjun
Please add one more rule that allow packet from redirect site.

Re: Access List URL Redirect BUG

Posted: Thu Aug 25, 2016 4:38 pm
by moatazelmasry
Many thanks. This solved my problem!!!!!