1528392 - ACL Request for sagevue1.corpdmz.mdc1.mozilla.com to "phone home"

Status: RESOLVED FIXED

(Infrastructure & Operations :: Proxy ACL Request, task)

Description

[Mark Richards [:freshness]]

hostname: sagevue1.corpdmz.mdc1.mozilla.com
IP: 10.48.72.25
Needs: sagevue.biamp.com

Comment 1

[Chris Knowles [:cknowles]]

Added the initial one, and we'll see if any other things need to be added.

Leaving this open until you signal that all is well.

Comment 2

[Mark Richards [:freshness]]

Registration successful, though will need to look into getting this hosted using IIS. More to dig into next week.

Comment 3

[Chris Knowles [:cknowles]]

Just sticking my head in to see if you need any other proxy rules added, or if you're good to go here.

Comment 4

[Mark Richards [:freshness]]

Thanks for your patience with this one. Looks like we'll need to add sagevue1.corpdmz.mdc1.mozilla.com :80, 443 as well. I just got the SSL cert applied today. Not urgent at all, I can access the site from other machines over VPN now anyway.

Comment 5

[Chris Knowles [:cknowles]]

... you shouldn't have to have the local host name in the proxy rules. Can you give me a time when you were working with it, so I can browse the proxy logs to see what happened?

Comment 6

[Chris Knowles [:cknowles]]

Alright, spoke on IRC. verified that the request was for testing of sagevue - usually requests will come from outside the box.

U-turn connections are not good things in the proxy - so usually the "bypass proxy for local" works - but for some reason, it doesn't work here. (I can verify that it's not hitting the proxy, or the firewall, but it's also not hitting the local IIS.)

In the end, this is only a temporary need, so you can uncheck the "Use Proxy" box in Control Panel -> Internet options -> connections -> LAN Setting. Then it works. But you probably don't want to leave it unchecked all the time.

(I've currently left it unchecked, as it is clear you're testing things.)

Let me know if you have any questions.