{"id":233,"date":"2009-04-20T17:00:54","date_gmt":"2009-04-20T15:00:54","guid":{"rendered":"http:\/\/michauko.org\/blog\/?p=233"},"modified":"2009-11-24T19:49:04","modified_gmt":"2009-11-24T17:49:04","slug":"firefox-les-proxy-et-les-adresses-locales","status":"publish","type":"post","link":"https:\/\/michauko.org\/blog\/firefox-les-proxy-et-les-adresses-locales-233\/","title":{"rendered":"firefox, les proxy et les adresses locales"},"content":{"rendered":"<p>Apr\u00e8s m&rsquo;\u00eatre fait suer quelques heures sur un probl\u00e8me d\u00e9bile de conf de proxy Firefox, j&rsquo;ai d\u00e9cid\u00e9 d&rsquo;en faire part dans ce billet. Ca fera peut-\u00eatre gagner du temps \u00e0 certains. Vu que la litterature sur le sujet est assez \u00e9parpill\u00e9e (voir \u00e0 la fin de l&rsquo;article). La seule vraie information semble \u00eatre un bugzilla de Mozilla, dat\u00e9 de 2001 et toujours en cours de discussion ! (au moins jusqu&rsquo;\u00e0 mi 2008)<!--more--><\/p>\n<h2>L&rsquo;histoire est la suivante<\/h2>\n<p>Vous utilisez un proxy, mais vous ne voulez pas l&rsquo;utiliser pour les adresses locales (genre : vos intranets). C&rsquo;est un choix raisonnable.<br \/>\nBien s\u00fbr, vous voulez utiliser les noms de hosts et pas les FQDN, exemple : http:\/\/serveur\/ et pas http:\/\/serveur.masociete.net\/<br \/>\nRaisonnable l\u00e0 aussi<\/p>\n<h2>Le constat d&rsquo;\u00e9chec<\/h2>\n<p>&#8211; Sous IE, lorsque vous cochez \u00ab\u00a0ne pas utiliser de proxy pour les adresses locales\u00a0\u00bb, \u00e7a fait ce qu&rsquo;on veut (waaa, m&rsquo;enfin, il y a d&rsquo;autres travers avec IE)<\/p>\n<p>&#8211; Sous firefox, c&rsquo;est moins simple :<\/p>\n<ul>\n<li>Si vous indiquez \u00ab\u00a0.masociete.net\u00a0\u00bb dans les adresses \u00e0 exclure (notez le \u00ab\u00a0.\u00a0\u00bb), alors les adresses du genre http:\/\/serveur.masociete.net\/ sont bien trait\u00e9es en direct (bypass du proxy) et les adresses courtes \u00ab\u00a0peuvent\u00a0\u00bb marcher :<\/li>\n<ul>\n<li>Ca marche si : par exemple avec Squid, vous avez ajout\u00e9 le param\u00e8tre \u00ab\u00a0append_domain\u00a0\u00bb contenant votre \u00ab\u00a0societe.net\u00a0\u00bb. MAIS : vous passez par le proxy m\u00eame pour ces sites locaux. C&rsquo;est d\u00e9bile ! (mais \u00e7a marche, on est d&rsquo;accord)<\/li>\n<li>Ca ne marche pas sinon, Firefox commence \u00e0 chercher sur google ce que pourrait \u00eatre votre nom de host&#8230; Et pas la peine de vous exciter sur la conf DNS de votre PC windows pour lui faire ajouter des suffixes DNS partout, \u00e7a ne change rien<\/li>\n<\/ul>\n<li>Si vous ne mettez aucune exclusion, \u00e7a revient au m\u00eame. Les syntaxes genre \u00a0\u00bb  *.masociete.net\u00a0\u00bb ne sont pas reconnues (silencieusement)<\/li>\n<li>Enfin, si vous vous limitez \u00e0 exclure des plages d&rsquo;IP, genre 192.168.x.y\/m \u00e7a ne suffit pas. Firefox se gourre (de mon point de vue) car il raisonne sur le nom et pas sur l&rsquo;IP. Donc le filtre marchera bien si vous tapez \u00ab\u00a0http:\/\/une.adr.esse.ip\/\u00a0\u00bb mais fera comme expliqu\u00e9 ci-dessus avec les noms de machines<\/li>\n<\/ul>\n<h2>La seule solution (il me semble) industrialisable<\/h2>\n<p>En passant par un fichier \u00ab\u00a0PAC\u00a0\u00bb (<a href=\"https:\/\/michauko.org\/blog\/2008\/06\/10\/proxy-pac-locaux-et-ie\/\">voir mon article sur le sujet<\/a>), alors \u00e7a marche.<br \/>\nLe secret ? ce m\u00e9canisme force \u00e0 r\u00e9soudre l&rsquo;IP associ\u00e9e au nom avant de commencer \u00e0 r\u00e9fl\u00e9chir, via la fonction isInNet par exemple (isPlainHostName doit pouvoir marcher aussi) ; de l\u00e0, si on voit qu&rsquo;on est sur telle plage d&rsquo;IP, on fait sans le proxy, en DIRECT.<br \/>\nExemple ultra-simple de conf :<br \/>\n<code>function FindProxyForURL(url, host)<br \/>\n  {<br \/>\n    if (isInNet(host, \"192.168.0.0\", \"255.255.0.0\")) {<br \/>\n      return \"DIRECT\";<br \/>\n    }<br \/>\n    else<br \/>\n      return \"PROXY mon_proxy:3128\";<br \/>\n  }<\/code><br \/>\nReste \u00e0 d\u00e9ployer ce script et modifier les conf des navigateurs. A vos GPO, scripts Samba, registrie etc.<\/p>\n<h2>Quelques r\u00e9f\u00e9rences<\/h2>\n<p><a href=\"https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=72444\">https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=72444<\/a><br \/>\n<a href=\"https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=91587\">https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=91587<\/a><br \/>\n<a href=\"http:\/\/support.microsoft.com\/default.aspx?scid=kb;EN-US;q303650\">http:\/\/support.microsoft.com\/default.aspx?scid=kb;EN-US;q303650<\/a><br \/>\n<a href=\"http:\/\/support.microsoft.com\/default.aspx?scid=kb;EN-US;q262981\">http:\/\/support.microsoft.com\/default.aspx?scid=kb;EN-US;q262981<\/a><br \/>\nBonne lecture, surtout pour le premier&#8230;<\/p>\n<p><strong>Si vous avez une meilleure solution je suis preneur&#8230;<\/strong><br \/>\nNotez que je n&rsquo;ai pas test\u00e9 depuis un firefox sous Linux ; mon propos \u00e9tant dans une entreprise avec des postes Windows.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Apr\u00e8s m&rsquo;\u00eatre fait suer quelques heures sur un probl\u00e8me d\u00e9bile de conf de proxy Firefox, j&rsquo;ai d\u00e9cid\u00e9 d&rsquo;en faire part dans ce billet. Ca fera peut-\u00eatre gagner du temps \u00e0 certains. Vu que la litterature &hellip;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_crdt_document":"","_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[9,2,82,83,4],"tags":[165,210,232],"class_list":["post-233","post","type-post","status-publish","format-standard","hentry","category-bugs","category-debian","category-pl","category-ubuntu","category-windows","tag-firefox","tag-ie","tag-squid"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>firefox, les proxy et les adresses locales - Le blog de Michauko<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/michauko.org\/blog\/firefox-les-proxy-et-les-adresses-locales-233\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"firefox, les proxy et les adresses locales - Le blog de Michauko\" \/>\n<meta property=\"og:description\" content=\"Apr\u00e8s m&rsquo;\u00eatre fait suer quelques heures sur un probl\u00e8me d\u00e9bile de conf de proxy Firefox, j&rsquo;ai d\u00e9cid\u00e9 d&rsquo;en faire part dans ce billet. Ca fera peut-\u00eatre gagner du temps \u00e0 certains. Vu que la litterature &hellip;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/michauko.org\/blog\/firefox-les-proxy-et-les-adresses-locales-233\/\" \/>\n<meta property=\"og:site_name\" content=\"Le blog de Michauko\" \/>\n<meta property=\"article:published_time\" content=\"2009-04-20T15:00:54+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2009-11-24T17:49:04+00:00\" \/>\n<meta name=\"author\" content=\"michauko\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"michauko\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/firefox-les-proxy-et-les-adresses-locales-233\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/firefox-les-proxy-et-les-adresses-locales-233\\\/\"},\"author\":{\"name\":\"michauko\",\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/#\\\/schema\\\/person\\\/0cd9f3d9ce4dccc05df81a5b27051ea9\"},\"headline\":\"firefox, les proxy et les adresses locales\",\"datePublished\":\"2009-04-20T15:00:54+00:00\",\"dateModified\":\"2009-11-24T17:49:04+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/firefox-les-proxy-et-les-adresses-locales-233\\\/\"},\"wordCount\":556,\"commentCount\":12,\"keywords\":[\"firefox\",\"ie\",\"squid\"],\"articleSection\":[\"bugs\",\"Debian\",\"planet-libre.org\",\"Ubuntu\",\"windows\"],\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/michauko.org\\\/blog\\\/firefox-les-proxy-et-les-adresses-locales-233\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/firefox-les-proxy-et-les-adresses-locales-233\\\/\",\"url\":\"https:\\\/\\\/michauko.org\\\/blog\\\/firefox-les-proxy-et-les-adresses-locales-233\\\/\",\"name\":\"firefox, les proxy et les adresses locales - Le blog de Michauko\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/#website\"},\"datePublished\":\"2009-04-20T15:00:54+00:00\",\"dateModified\":\"2009-11-24T17:49:04+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/#\\\/schema\\\/person\\\/0cd9f3d9ce4dccc05df81a5b27051ea9\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/firefox-les-proxy-et-les-adresses-locales-233\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/michauko.org\\\/blog\\\/firefox-les-proxy-et-les-adresses-locales-233\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/firefox-les-proxy-et-les-adresses-locales-233\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/michauko.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"firefox, les proxy et les adresses locales\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/michauko.org\\\/blog\\\/\",\"name\":\"Le blog de Michauko\",\"description\":\"Si tu ne comprends pas le titre de l&#039;article, passe ton chemin\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/michauko.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/#\\\/schema\\\/person\\\/0cd9f3d9ce4dccc05df81a5b27051ea9\",\"name\":\"michauko\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5c3a8969c185fd0eef3893a15408f3ef1b36a6681a066b1eb32045643c30ba65?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5c3a8969c185fd0eef3893a15408f3ef1b36a6681a066b1eb32045643c30ba65?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5c3a8969c185fd0eef3893a15408f3ef1b36a6681a066b1eb32045643c30ba65?s=96&d=mm&r=g\",\"caption\":\"michauko\"},\"sameAs\":[\"http:\\\/\\\/michauko.org\\\/\"],\"url\":\"https:\\\/\\\/michauko.org\\\/blog\\\/author\\\/randomized2\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"firefox, les proxy et les adresses locales - Le blog de Michauko","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/michauko.org\/blog\/firefox-les-proxy-et-les-adresses-locales-233\/","og_locale":"fr_FR","og_type":"article","og_title":"firefox, les proxy et les adresses locales - Le blog de Michauko","og_description":"Apr\u00e8s m&rsquo;\u00eatre fait suer quelques heures sur un probl\u00e8me d\u00e9bile de conf de proxy Firefox, j&rsquo;ai d\u00e9cid\u00e9 d&rsquo;en faire part dans ce billet. Ca fera peut-\u00eatre gagner du temps \u00e0 certains. Vu que la litterature &hellip;","og_url":"https:\/\/michauko.org\/blog\/firefox-les-proxy-et-les-adresses-locales-233\/","og_site_name":"Le blog de Michauko","article_published_time":"2009-04-20T15:00:54+00:00","article_modified_time":"2009-11-24T17:49:04+00:00","author":"michauko","twitter_card":"summary_large_image","twitter_misc":{"\u00c9crit par":"michauko","Dur\u00e9e de lecture estim\u00e9e":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/michauko.org\/blog\/firefox-les-proxy-et-les-adresses-locales-233\/#article","isPartOf":{"@id":"https:\/\/michauko.org\/blog\/firefox-les-proxy-et-les-adresses-locales-233\/"},"author":{"name":"michauko","@id":"https:\/\/michauko.org\/blog\/#\/schema\/person\/0cd9f3d9ce4dccc05df81a5b27051ea9"},"headline":"firefox, les proxy et les adresses locales","datePublished":"2009-04-20T15:00:54+00:00","dateModified":"2009-11-24T17:49:04+00:00","mainEntityOfPage":{"@id":"https:\/\/michauko.org\/blog\/firefox-les-proxy-et-les-adresses-locales-233\/"},"wordCount":556,"commentCount":12,"keywords":["firefox","ie","squid"],"articleSection":["bugs","Debian","planet-libre.org","Ubuntu","windows"],"inLanguage":"fr-FR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/michauko.org\/blog\/firefox-les-proxy-et-les-adresses-locales-233\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/michauko.org\/blog\/firefox-les-proxy-et-les-adresses-locales-233\/","url":"https:\/\/michauko.org\/blog\/firefox-les-proxy-et-les-adresses-locales-233\/","name":"firefox, les proxy et les adresses locales - Le blog de Michauko","isPartOf":{"@id":"https:\/\/michauko.org\/blog\/#website"},"datePublished":"2009-04-20T15:00:54+00:00","dateModified":"2009-11-24T17:49:04+00:00","author":{"@id":"https:\/\/michauko.org\/blog\/#\/schema\/person\/0cd9f3d9ce4dccc05df81a5b27051ea9"},"breadcrumb":{"@id":"https:\/\/michauko.org\/blog\/firefox-les-proxy-et-les-adresses-locales-233\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/michauko.org\/blog\/firefox-les-proxy-et-les-adresses-locales-233\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/michauko.org\/blog\/firefox-les-proxy-et-les-adresses-locales-233\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/michauko.org\/blog\/"},{"@type":"ListItem","position":2,"name":"firefox, les proxy et les adresses locales"}]},{"@type":"WebSite","@id":"https:\/\/michauko.org\/blog\/#website","url":"https:\/\/michauko.org\/blog\/","name":"Le blog de Michauko","description":"Si tu ne comprends pas le titre de l&#039;article, passe ton chemin","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/michauko.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Person","@id":"https:\/\/michauko.org\/blog\/#\/schema\/person\/0cd9f3d9ce4dccc05df81a5b27051ea9","name":"michauko","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/secure.gravatar.com\/avatar\/5c3a8969c185fd0eef3893a15408f3ef1b36a6681a066b1eb32045643c30ba65?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/5c3a8969c185fd0eef3893a15408f3ef1b36a6681a066b1eb32045643c30ba65?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/5c3a8969c185fd0eef3893a15408f3ef1b36a6681a066b1eb32045643c30ba65?s=96&d=mm&r=g","caption":"michauko"},"sameAs":["http:\/\/michauko.org\/"],"url":"https:\/\/michauko.org\/blog\/author\/randomized2\/"}]}},"_links":{"self":[{"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/posts\/233","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/comments?post=233"}],"version-history":[{"count":11,"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/posts\/233\/revisions"}],"predecessor-version":[{"id":981,"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/posts\/233\/revisions\/981"}],"wp:attachment":[{"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/media?parent=233"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/categories?post=233"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/tags?post=233"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}