Allow Anydesk through WebFilter/Proxy

webfilter
proxy

(Michael Kicks) #1

NethServer Version: 7.5.1804
Module: Web Content Filter

Firewall enviroment, Red and Green network interfaces.
Transparent proxy with SSL on Green.

2 filters configured:
Filter 1: unlimited access
Filter 2: access allowed only to whitelisted domains, plus a couple of categories from Université Toulouse BlackList (remote-control, update)

Client which rely on filter 1 cannot be accessed via AnyDesk, as was before enabling the transparent proxy.
I tried also to allow the IP Addresses associated with Anydesk that i found on the squid access.log. Hope this will help someone.

85.25.103.30
78.46.49.23
176.9.17.73
217.182.197.144
194.71.18.111
5.9.105.232
176.9.65.111
domain “anydesk.com” was already whitelisted
No proxy setup on the anydesk software

How can i enable webfilter/proxy to allow connection? Anyone managed this kind of issue before?


(Michael Träumner) #2

Hi @pike,
I think you have to bypass it with firewall rules.
You can also have a look here:

PS: most posts there are English.


(Michael Kicks) #3

Thanks… :slight_smile:
For this kind of proposed solutions, the hint is “bypass proxy for AnyDesk’s hosts”
relay-ce59fdb0.net.anydesk.com
relay-4eedeab0.net.anydesk.com
relay-cde85b05.net.anydesk.com
relay-c9b5be97.net.anydesk.com
relay-5c3e138c.net.anydesk.com
relay-ca111041.net.anydesk.com
relay-a9fa3480.net.anydesk.com
boot-01.net.anydesk.com
anydesk.com
85.25.213.31
149.202.201.54
85.114.134.23
17.248.147.18
172.217.16.202
46.4.119.76
176.9.17.73
17.252.82.47

Let’s see if this kind of trick works…


(Michael Kicks) #4

And it fails…
Settings applied until now.
immagine


(Michael Träumner) #5

Perhaps you could have a look with wireshark or an other network tool if there some more addresses to exclude.


(Michael Kicks) #6

This is not what i call “best practice”, however that this option disabled
immagine
ran the river to the sea.

But that’s not a solution…


ESET Remote Administrator and Licence Renewal
(Michael Träumner) #7

@dev_team
Is it possible block we sites using ip address excluded whitelisted ip addresses? If not could this be a feature?