[ ijbswa-Bugs-3615020 ] transparent proxy + accept-intercept-requests

Bugs item #3615020, was opened at 2013-09-17 21:33
Message generated for change (Tracker Item Submitted) made by lsoltero
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=111118&aid=3615020&group_id=11118

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: funct: header manipulation
Group: version 3.0.21
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: lsoltero (lsoltero)
Assigned to: Nobody/Anonymous (nobody)
Summary: transparent proxy + accept-intercept-requests

Initial Comment:

accept-intercept-request works fine when the client browser has been manually configured to use the proxy server.  However, when in transparent mode (where traffic from port 80 is NATTED to the proxy port) and the browser is unaware that is being proxyed, authentication requests are not done correctly and the browser displays a "this page is not available" mesg.

Not sure what the fix is for this if there is one.

to reproduce the error on any linux distribution...

1. add accept-interface-requests to the proxy config
2. execute the following iptables command as root
iptables -t nat -N natcensor
iptables -t nat -I prerouting_rule -j natcensor
iptables -t nat -A natcensor -p tcp --dport 80 -j REDIRECT --to-port 3128 (where 3128 is the port the proxy is listening on)
3. confirm that you can browse the internet while confirming that the proxy is being used by checking the logs.  The browser should "normal" non-proxy mode.
4. configure an upstream proxy that requires authentication
5. browse to a page that requires the use of the proxy.
at this point you should see the failure.
6. change the configuration of the browser to manually use the proxy.
7. confirm that the authentication request window pops up on the browser when using the upstream proxy.


problem discovered using privoxy 3.0.21 under OpenWRT.

--luis



----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=111118&aid=3615020&group_id=11118

------------------------------------------------------------------------------
LIMITED TIME SALE - Full Year of Microsoft Training For Just $49.99!
1,500+ hours of tutorials including VisualStudio 2012, Windows 8, SharePoint
2013, SQL 2012, MVC 4, more. BEST VALUE: New Multi-Library Power Pack includes
Mobile, Cloud, Java, and UX Design. Lowest price ever! Ends 9/20/13. 
http://pubads.g.doubleclick.net/gampad/clk?id=58041151&iu=/4140/ostg.clktrk