TMG Forefront Proxy blocking internal HTTP requests

Posted by Pascal on Server Fault See other posts from Server Fault or by Pascal
Published on 2011-03-18T23:18:16Z Indexed on 2011/03/19 0:11 UTC
Read the original article Hit count: 708

Filed under:

proxy

|

blocking

|

Forefront

I have TMG Forefront with Proxy installed and configured. However, whenever I make internal HTTP requested to servers on the internal network with a fully qualified dns name, the proxy denies the connection.

Denied Connection FRW-02 18/03/2011 20:06:37 
Log type: Web Proxy (Forward) 
Status: 12202 Forefront TMG denied the specified Uniform Resource Locator (URL).  
Rule: Default rule 
Source: Internal (10.50.75.21:21492) 
Destination: Internal (10.50.75.10:8080) 
Request: GET http://app-01.mydomain.com.br:9871/internalwebserver_deploy/MyServiceService.svc?wsdl 
Filter information: Req ID: 0a157279; Compression: client=No, server=No, compress rate=0% decompress rate=0% 
Protocol: http 
User: anonymous

How can I get around this block? This is an internal call, so it should block it. If I use only http://app-01:9871/internalwebserver_deploy/MyServiceService.svc?wsdl, without the domain after the server name, then it doesn't get blocked.
10.50.75.10 is the firewall's ip, and the internal network's gateway.

© Server Fault or respective owner

Related posts about proxy

DNS lookup failures while accessing my website some proxy error

as seen on Server Fault - Search for 'Server Fault'
Here is a situation until today morning,every thing has been working perfectly fine with me. From past 6 months many of my domains wer accessible as http://site1.myserver.com http://site2.myserver.com http://site3.myserver.com http://site4.myserver.com All these were Reverse Proxy configurations… >>> More
Apache2 mod_proxy to remote Tomcat7 - slow response

as seen on Server Fault - Search for 'Server Fault'
Been stuck with this one for a few days. Will try to provide as much information as possible, but please feel free to ask for extra detail. I have 2 VMs behind a NAT, 192.168.0.100 and 192.168.0.102, both running Ubuntu 11.04 x64. The first one is mapped to the exterior and is our webserver, has… >>> More
How to set a proxy for Webbrowser Control without effecting the SYSTEM/IE proxy

as seen on Stack Overflow - Search for 'Stack Overflow'
How can I set a proxy for a Webbrowser Control without setting a proxy for IE. Basically I want my application to use a certain proxy however obviously I don't want to change user's IE proxy settings. >>> More
Difference between proxy server and reverse proxy server

as seen on Stack Overflow - Search for 'Stack Overflow'
What is the difference between proxy server and reverse proxy server? >>> More
[MAJ] Transformer APACHE 2.0 en Proxy HTTP - Comment utiliser le Module Proxy d'Apache

as seen on ASP-PHP.net - Search for 'ASP-PHP.net'
Modification du script suite ? l'alerte concernant la possibilit? offerte ? n'importe qui d'utiliser le moteur APACHE comme proxy sans aucun contr?le. >>> More

Related posts about blocking

Non-Blocking I/O Made Possible in Java

as seen on Internet.com - Search for 'Internet.com'
Java SE7 "Dolphin" release is nearing and we're chomping at the bit. So let's dig in and review non-blocking IO, a feature of java.nio (New I/O) package that is a part of Java v1.4, v1.5 and v1.6 and we'll also take a peek at the java.nio.file (NIO.2) package. >>> More
Non-Blocking I/O Made Possible in Java

as seen on Internet.com - Search for 'Internet.com'
Java SE7 "Dolphin" release is nearing and we're chomping at the bit. So let's dig in and review non-blocking IO, a feature of java.nio (New I/O) package that is a part of Java v1.4, v1.5 and v1.6 and we'll also take a peek at the java.nio.file (NIO.2) package. >>> More
Generate a proper 404 page for blocked sites via /etc/hosts instead of redirect to localhost

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I have blocked some websites by editing /etc/hosts and adding several newline-entries in the following manner: 0.0.0.0 www.domain.com And it works. The only thing is: when a website is visited which is blocked, the browser is redirected to my http://localhost, resulting in a directory listing or… >>> More
Block a website on HTTPS [closed]

as seen on Programmers - Search for 'Programmers'
I would like to block some websites on their HTTPS version and allow them on HTTP. The main websites involved are Youtube and Google Images/Videos. This is because on the HTTP version, I can enforce the Safesearch filter on those platforms, whereas I cannot on the HTTPS version. For me, this is a… >>> More
What should we tell our unsupported IE6 users?

as seen on Programmers - Search for 'Programmers'
In the upcoming version of our web app, we've broken IE6, and we don't intend to fix it. We've had a clear warning posted for IE6 users for some months; we've decided it's time not to support it. My question is: how should we communicate this to our users? Some people here feel that we should block… >>> More