Firefox doesn't use the ignore list of the system-wide proxy config

[ivnm]

Environment :

An internal network (say 192.168.0.*) with a proxy. (say 192.168.0.1). An internal web server that you can't access through the proxy, only with a direct connection (say 192.168.0.2).

1. In the Gnome panel, open System > Preferences > Proxy settings.
2. Configure the HTTP proxy as 192.168.0.1 (on my config, it's the same proxy for all protocols). In the "advanced configuration" tab, set 192.168.0.2 as an ignored host.
3. Open Epiphany browser : You can access the web through the proxy. You can also access 192.168.0.2 without problem.
4. Open Firefox and be sure that it's configured to use the system wide proxy. It can access the web (so proxy settings are working) but it cannot access 192.168.0.2. It tries to access it through the proxy.
5. Change Firefox settings to configure the proxy manually in Firefox. Add the proxy and add 192.168.0.2 as an exception. Check that now Firefox can access the web through the proxy and 192.168.0.2 without problem.

Obvious conclusion : When set to use System wide proxy, Firefox doesn't use the ignore list.

Excpected behaviour : When set to use System wide proxy, Firefox should behave like Epiphany and use the ignore list.

*** Original bug report ***
Firefox 3.0b4 has problem with system network proxy configuration - cannot recognize addresses from "Ignore Host list" in "Network Proxy" configuration - although I don't know if this is problem of Firefox or Ubutnu or both.
1. System -> Preferences -> Network Proxy -> Manual proxy configuration is set and in "Advanced Configuration" - 192.168.70.128 is added to "Ignore Host list"
2. in Firefox -> Edit -> Preferences -> Advanced -> Network -> Connection Settings -> "Use system proxy settings" is selected

When I type 192.168.70.128 in Location/Address bar and I hit enter, Firefox ask me about my proxy user and password. In my opinion it should take me to that address (192.168.70.128) without asking for proxy user and password, because it is in "Ignore Host list".
If I switch configuration in Firefox -> Edit -> Preferences -> Advanced -> Network -> "Connection Settings" to "Manual proxy configuration" and add proxy address to "HTTP Proxy" and add 192.168.70.128 to "No proxy for" list - everithing is ok - Firefox does not ask for proxy user and password and load the page from 192.168.70.128.

Version of Ubuntu is 8.04 - the Hardy Heron - released in April 2008
I have used ubuntu-8.04-beta-desktop-amd64.iso livecd without installing it to hard disk.

[®om (rom1v)]

User-Agent: Mozilla/5.0 (X11; U; Linux i686; fr-FR; rv:1.9b5) Gecko/2008041514 Firefox/3.0b5
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; fr-FR; rv:1.9b5) Gecko/2008041514 Firefox/3.0b5

I don't know if the problem comes from gnome or firefox. So I report here, tell
me if I am wrong.

First, in Firefox, Edit > Preferences > Settings > Advanced > Proxy settings...
I choose "use system settings".
In System > Preferences > Proxy, I choose the proxy, ok, it works. Firefox use
correctly the proxy system settings.

Except for one point : in advanced configuration in gnome proxy settings, I can
choose the hostlist to ignore, for example "localhost", which is a good point.
But those settings are totally ignored by firefox : if at work I go to
localhost, it tries to resolve "localhost" connecting to the proxy (and doesn't
resolve it).

If in firefox, instead of "use proxy system settings", I use "manual
configuration", and copy EXACTLY the same settings than those in gnome proxy
settings, especially in "no proxy for", I put "localhost", and it works.

So... there is a little bug somewhere... gnome? firefox? Don't know at all...

Reproducible: Always

Steps to Reproduce:
1. Use a proxy.
2. Configure proxy system settings in gnome, with "no proxy for : localhost".
3. Configure "use system settings" for proxy in firefox.
4. Launch a server (apache) on your system for example
5. Try to connect to localhost...
Actual Results:
It tries to connect to the proxy and resolve "localhost".

Expected Results:
To directly connect to localhost (it is defined in /etc/hosts)

http://bugzilla.gnome.org/show_bug.cgi?id=528605

[Sylvain Pasche (sylvain-pasche)]

Created attachment 316308
patch

A small missed renaming in the last update of attachment 299799

Who wants to review?

[Roc-ocallahan (roc-ocallahan)]

Comment on attachment 316308
patch

trivial patch, zero risk.

[Beltzner (beltzner)]

Comment on attachment 316308
patch

a1.9=beltzner

[Gavin Sharp (gavin-sharp)]

mozilla/toolkit/system/gnome/nsGConfService.cpp 1.9

[Sylvain Pasche (sylvain-pasche)]

Changing summary to make it easier to find this bug.

[Sylvain Pasche (sylvain-pasche)]

*** Bug 431298 has been marked as a duplicate of this bug. ***

[AB (aberte)]

I have this problem too.
I'm using Ubuntu 8.04 (AMD64), and Firefox 3.0b5.

[msznapka (bigmartin)]

I have exactly same problem.
http://localhost:8080/myApp works fine with "Manual proxy configuration" in Firefox, but with "Use system proxy settings" does NOT work.
It seems that firefox is not using data from "Ignore Host List" from System-Preferences-NetworkProxy-AdvancedConfiguration.

configuration:
Ubuntu 8.04 Desktop i386, Firefox 3b5

our company proxy:
squid/3.0.STABLE2

[denhams (denhams)]

I am having the same problem.

Using Ubuntu 8.04 AMD64, and Firefox 3.0b5

[®om (rom1v)]

OK, RC1 updated in ubuntu repositories, it works !

Thank you :)

[Lionel Dricot (ploum-deactivatedaccount)]

Same problem for me. Setting this bug as confirmed.

[Alexander Sack (asac)]

On Wed, Jun 11, 2008 at 10:21:01AM -0000, Launchpad Bug Tracker wrote:
> You have been subscribed to a public bug:
>
> Firefox 3.0b4 has problem with system network proxy configuration - cannot recognize addresses from "Ignore Host list" in "Network Proxy" configuration - although I don't know if this is problem of Firefox or Ubutnu or both.
> 1. System -> Preferences -> Network Proxy -> Manual proxy configuration is set and in "Advanced Configuration" - 192.168.70.128 is added to "Ignore Host list"
> 2. in Firefox -> Edit -> Preferences -> Advanced -> Network -> Connection Settings -> "Use system proxy settings" is selected
>
> When I type 192.168.70.128 in Location/Address bar and I hit enter, Firefox ask me about my proxy user and password. In my opinion it should take me to that address (192.168.70.128) without asking for proxy user and password, because it is in "Ignore Host list".
> If I switch configuration in Firefox -> Edit -> Preferences -> Advanced -> Network -> "Connection Settings" to "Manual proxy configuration" and add proxy address to "HTTP Proxy" and add 192.168.70.128 to "No proxy for" list - everithing is ok - Firefox does not ask for proxy user and password and load the page from 192.168.70.128.
>
> Version of Ubuntu is 8.04 - the Hardy Heron - released in April 2008
> I have used ubuntu-8.04-beta-desktop-amd64.iso livecd without installing it to hard disk.
>

We need to make a proper bug out of this. at least we need a precise
and comprehensive step by step instruction how to reproduce. use this form:

Steps to Reproduce:

 1.
 2.
 3.

Result:
 See this and that

Expected Result:
 We should see this and that

 status incomplete

 - Alexander

[Lionel Dricot (ploum-deactivatedaccount)]

I modified the bug report. The issue is really straightforward to hit, I cannot see how to explain it better.

[Lionel Dricot (ploum-deactivatedaccount)]

as pointed by comment 2, it also "works" for localhost. In the bug description, you could replace all 192.168.0.2 occurence by "localhost". (it's also easier to reproduce. Configure a proxy, even if you haven't one, with localhost as exception. Install a local webserver and try to access it via http://localhost/. Epiphany will access it without problem while Firefox will try to access the unknown proxy)

[acidix (acidix)]

Same Problem here.

Further description:
 - When adding ignored hosts like "*.mycompany.com" Firefox respects the setting
 - When adding a subnet to be ignored like "10.0.0.0/8" Firefox completely ignores it

Seems to be a Firefox / Mozilla / Gnome related issue because I also notice it using Gentoo.

[Tiago Rodrigues (tmcrodrigues)]

Hi there. I can confirm i have this problem too, and i think the description of the bug is perfect. But this sounds more like a Firefox bug, so it should probably be filed on their bugzilla.

[Tiago Rodrigues (tmcrodrigues)]

I am using Ubuntu Hardy Heron (8.04 LTS) and i have this same problem. I also have all the latest updates (Firefox got updated to 3.0.2 yesterday), and this problem still exists. There's also a confirmed bug filed on Launchpad (https://bugs.launchpad.net/ubuntu/+source/firefox-3.0/+bug/204616) but i believe this is more of a Firefox problem than an Ubuntu one.

[Tiago Rodrigues (tmcrodrigues)]

This bug has been filed multiple times on the Firefox Bugzilla, and apparently has been solved since Firefox 3 RC1, but i still have it, even with Firefox 3.0.2. I've notified them about this situation on the firefox bugzilla.

Link for the firefox bugzilla bug:
https://bugzilla.mozilla.org/show_bug.cgi?id=429520

[Tiago Rodrigues (tmcrodrigues)]

Ok, ignore my last comment. I can confirm the problem is solved, but the problem now is on the Ubuntu's default configuration for those exceptions, so nothing to do with Firefox itself.

[Tiago Rodrigues (tmcrodrigues)]

After further investigation, i can confirm that this problem is indeed solved. What happens now is that the default configuration for the exceptions on the Gnome Network Proxy Preferences is probably not the most correct.

The default exceptions are:
localhost
*.local
127.0.0.0/8

This way, localhost works, but 127.0.0.1 doesn't, and i know this last mask should probably work for 127.0.0.1 but it doesn't. Adding 127.0.0.1 as an exception solves the problem, if 127.0.0.0/8 should work isn't this a bug in the Gnome Proxy Preferences ?

[Feanor (angelo-pantano)]

this bug persist in ubuntu intrepid with firefox 3.0.3

i cannot browse internal (ignored hosts) even if i place the wildcard 10.* in proxy settings (gnome) AND in the ignored hosts of firefox, my only way to navigate in the intranet is to completely disable the proxy

[acidix (acidix)]

Firefox accepts either

a) Wildcards in Hostname, e.g. *.yourcompany.com
or
b) Netmasks if you plan to access plain IP-Adresses, such as 10.0.0.0/8

Are you able to reproduce the bug using either solution a or b?

[Tom Bragg (tom-4ckc)]

I can reproduce the problem here on Intrepid with firefox 3.0.4.

Wild cards in hostname works correctly so:

*.mycompany.com in gnome proxy settings allows me to access server.mycompany.com directly (not hitting the proxy server)

but:

10.0.0.0/8 in gnome proxy settings is not imported correctly so trying to access 10.0.0.2 still tries to use the proxy, even though the same setting locally in firefox works correctly.

Additionally, authentication details entered in the gnome proxy settings applet are not honoured by firefox which still asks for authentication.

[Martin Mai (mrkanister-deactivatedaccount-deactivatedaccount)]

This is fixed upstream now.

[iav (iav)]

Trying with live-usb image of 9.04, system-wide proxy settings ignores by firefox at all.

[Rob van Vliet (rob-van-vliet)]

On an installed Ubuntu Jaunty NBR 9.04 firefox ignores the sytem proxy settings

[Alex Mauer (hawke)]

@Tiago: I think this is in fact a problem with Firefox. Ubuntu's default configuration includes 127.0.0.0/8, but Firefox still tries to use the proxy for 127.0.0.1

[Alex Mauer (hawke)]

This is still a problem in karmic. Subnet-based ignore entries don't work. (i.e. 127.0.0.0/8 doesn't work, but 127.0.0.1 does)

[RickB (rick-777)]

Confirmed still a problem for Firefox 3.5.
 I tried ignored host "10.0.0.0/8" - this works for Epiphany but not for Firefox.

+1 for a fix for Firefox 3.5

Linux rdb5730 2.6.28-15-generic #52-Ubuntu SMP Wed Sep 9 10:49:34 UTC 2009 i686 GNU/Linux

[Maharifu (mail-lmcarvalho)]

Hi
maybe this should be a separate bug report, but I'm having a related problem. If I use 'system proxy settings' in Firefox, I cannot access https websites, although I can download from https from the terminal, and http works as expected. When I set proxy definitions manually in firefox, everything works ok.

Can anyone else confirm this behaviour?

I'm using Ubuntu Karmic beta x64 and Firefox 3.5.3

[Lthere (helder-magalhaes)]

(In reply to comment #10)
> @Tiago: I think this is in fact a problem with Firefox. Ubuntu's default
> configuration includes 127.0.0.0/8, but Firefox still tries to use the proxy
> for 127.0.0.1

I can confirm this as well, using Ubuntu 9.10 and Firefox 3.5.5 [1]. I've setup this proxy ignore rule (using Gnome's proxy preferences):
 172.18.0.0/16

I was hoping that it would allow me to reach all servers in that particular subnet (172.18.*.*) but it didn't work. Explicitly adding the server(s) I want access to directly, one entry for each IP address, works though.

I've also tried a suggested workaround [2], using a wild-cards, which didn't work.

I couldn't find a related issue for this last pair of comments. Are we missing something (or simply didn't crawl enough)? Should this unexpected behavior be moved to a separate bug?

[1] Mozilla/5.0 (X11; U; Linux i686; pt-PT; rv:1.9.1.5) Gecko/20091109 Ubuntu/9.10 (karmic) Firefox/3.5.5
[2] http://forums.mozillazine.org/viewtopic.php?p=810826&sid=99313940311817c75db4049ab4546afc#p810826

[JohnCollaros (timefantom)]

I can confirm that I am having similar problems with most people on this list.
I have a clean install of 10.04 LTS and running Firefox 3.6.3 (the default provided by 10.04 LTS).

I set a system-wide proxy in Preferences -> Network Proxy.
Firefox uses the Proxy server supplied, but does not recognise network ranges specified in the "Ignored Hosts" tab.
Just with the default settings, attempting to browse to 127.0.0.1 takes me via the proxy.
I know this because I get an IIS error message. This PC cannot be running IIS!!!!!

It does understand host entries in the "Ignored Hosts" tab though. I

I should not have to have to maintain proxy settings per app, per user, nor on a per host basis.
This is just not feasible.

What is the fix for this?

[Chinmay Rajhans (rajhanschinmay)]

In the Ubuntu 12.04,

if u try to set network proxy, there is no options for the following:

bypass proxy for
no proxy for
proxy ignore list

so if u want some proxy bypass to be used and u set the settings in the settings panel, then firefox does not work properly with the system settings.

So kindly include this options asap in the Ubuntu network proxy settings.

Thank you.

[Micah Gersten (micahg)]

This was already fixed a long time ago