Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
-+-
 Reporter:  kT3Ycp9jwm   |  Owner:  tbb-
 |  team
 Type:  defect   | Status:  closed
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:  fixed
 Keywords:  tbb-proxy-bypass,|  Actual Points:
  TorBrowserTeam201906, GeorgKoppen201906, tbb-  |
  backported |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * keywords:
 tbb-proxy-bypass, TorBrowserTeam201906, GeorgKoppen201906, tbb-
 backport
 =>
 tbb-proxy-bypass, TorBrowserTeam201906, GeorgKoppen201906, tbb-
 backported


Comment:

 Backported by cherry-picking the fix onto `tor-browser-60.8.0esr-8.5-1`
 (commit 85e9a040aea41cf3c926394da1bcf22a298bf081).

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
-+-
 Reporter:  kT3Ycp9jwm   |  Owner:  tbb-
 |  team
 Type:  defect   | Status:  closed
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:  fixed
 Keywords:  tbb-proxy-bypass,|  Actual Points:
  TorBrowserTeam201906, GeorgKoppen201906, tbb-  |
  backport   |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-

Comment (by gk):

 Replying to [comment:27 kT3Ycp9jwm]:
 > sorry for the almost-off-topic question... when will Tor Browser include
 this patch?
 > thanks

 I think the next regular one will have it (which is scheduled for 9/3).

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
-+-
 Reporter:  kT3Ycp9jwm   |  Owner:  tbb-
 |  team
 Type:  defect   | Status:  closed
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:  fixed
 Keywords:  tbb-proxy-bypass,|  Actual Points:
  TorBrowserTeam201906, GeorgKoppen201906, tbb-  |
  backport   |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-

Comment (by kT3Ycp9jwm):

 sorry for the almost-off-topic question... when will Tor Browser include
 this patch?
 thanks

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
-+-
 Reporter:  kT3Ycp9jwm   |  Owner:  tbb-
 |  team
 Type:  defect   | Status:  closed
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:  fixed
 Keywords:  tbb-proxy-bypass,|  Actual Points:
  TorBrowserTeam201906, GeorgKoppen201906, tbb-  |
  backport   |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * keywords:  tbb-proxy-bypass, TorBrowserTeam201906, GeorgKoppen201906 =>
 tbb-proxy-bypass, TorBrowserTeam201906, GeorgKoppen201906, tbb-
 backport


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
-+-
 Reporter:  kT3Ycp9jwm   |  Owner:  tbb-
 |  team
 Type:  defect   | Status:
 |  merge_ready
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tbb-proxy-bypass,|  Actual Points:
  TorBrowserTeam201906, GeorgKoppen201906|
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-

Comment (by gk):

 Replying to [comment:21 kT3Ycp9jwm]:
 > Replying to [comment:20 gk]:
 > > Please use that version for review, so we can include it in the next
 release.
 >
 > sorry... what should I have to do?

 Sorry. That's been meant for the reviewer.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
-+-
 Reporter:  kT3Ycp9jwm   |  Owner:  tbb-
 |  team
 Type:  defect   | Status:  closed
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:  fixed
 Keywords:  tbb-proxy-bypass,|  Actual Points:
  TorBrowserTeam201906, GeorgKoppen201906|
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * status:  merge_ready => closed
 * resolution:   => fixed


Comment:

 Replying to [comment:22 pospeselr]:
 > This patch ( https://gitweb.torproject.org/tor-browser.git/commit/?h
 =tor-browser-60.7.0esr-9.0-1=9d582e62e32ee8143fd638744f2f5f0f49c28ca3 )
 looks good to me.

 Thanks!

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
-+-
 Reporter:  kT3Ycp9jwm   |  Owner:  tbb-
 |  team
 Type:  defect   | Status:
 |  merge_ready
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tbb-proxy-bypass,|  Actual Points:
  TorBrowserTeam201906, GeorgKoppen201906|
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by pospeselr):

 * status:  needs_review => merge_ready


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
-+-
 Reporter:  kT3Ycp9jwm   |  Owner:  tbb-
 |  team
 Type:  defect   | Status:
 |  needs_review
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tbb-proxy-bypass,|  Actual Points:
  TorBrowserTeam201906, GeorgKoppen201906|
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by pospeselr):

 * keywords:  tbb-proxy-bypass, TorBrowserTeam201906R, GeorgKoppen201906 =>
 tbb-proxy-bypass, TorBrowserTeam201906, GeorgKoppen201906


Comment:

 This patch ( https://gitweb.torproject.org/tor-browser.git/commit/?h=tor-
 browser-60.7.0esr-9.0-1=9d582e62e32ee8143fd638744f2f5f0f49c28ca3 )
 looks good to me.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
-+-
 Reporter:  kT3Ycp9jwm   |  Owner:  tbb-
 |  team
 Type:  defect   | Status:
 |  needs_review
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tbb-proxy-bypass,|  Actual Points:
  TorBrowserTeam201906R, GeorgKoppen201906   |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-

Comment (by kT3Ycp9jwm):

 Replying to [comment:20 gk]:
 > Please use that version for review, so we can include it in the next
 release.

 sorry... what should I have to do?

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
-+-
 Reporter:  kT3Ycp9jwm   |  Owner:  tbb-
 |  team
 Type:  defect   | Status:
 |  needs_review
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tbb-proxy-bypass,|  Actual Points:
  TorBrowserTeam201906R, GeorgKoppen201906   |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * status:  needs_information => needs_review
 * keywords:  tbb-proxy-bypass, TorBrowserTeam201906, GeorgKoppen201906 =>
 tbb-proxy-bypass, TorBrowserTeam201906R, GeorgKoppen201906


Comment:

 Replying to [comment:19 kT3Ycp9jwm]:
 > it works!
 > both on 32 and 64 bit... thank you very much!
 >
 > on x64 I got a block from Win Defender (unknown publisher) but today I
 found how to go on

 Yeah, sorry for that I did not sign the .exe file. But I am glad I found
 the right knobs to turn. :)

 I pushed the patch per accident onto `tor-browser-60.7.0esr-9.0-1`
 directly (commit 9d582e62e32ee8143fd638744f2f5f0f49c28ca3), instead of
 pointing to my public tor-browser repo. Sorry for that mistake (I'll leave
 the patch in for now to avoid additional overhead backout/reapply
 overhead). Please use that version for review, so we can include it in the
 next release.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
-+-
 Reporter:  kT3Ycp9jwm   |  Owner:  tbb-
 |  team
 Type:  defect   | Status:
 |  needs_information
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tbb-proxy-bypass,|  Actual Points:
  TorBrowserTeam201906, GeorgKoppen201906|
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-

Comment (by kT3Ycp9jwm):

 it works!
 both on 32 and 64 bit... thank you very much!

 on x64 I got a block from Win Defender (unknown publisher) but today I
 found how to go on

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
-+-
 Reporter:  kT3Ycp9jwm   |  Owner:  tbb-
 |  team
 Type:  defect   | Status:
 |  needs_information
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tbb-proxy-bypass,|  Actual Points:
  TorBrowserTeam201906, GeorgKoppen201906|
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-

Comment (by gk):

 Replying to [comment:17 kT3Ycp9jwm]:
 > on x64 I can't launch the exe, could you please post a zip?

 Hm, maybe, let me see. What is the issue? Meanwhile, maybe a 32bit build
 would help?

 https://people.torproject.org/~gk/testbuilds/torbrowser-install-30575_en-
 US.exe
 https://people.torproject.org/~gk/testbuilds/torbrowser-install-30575_en-
 US.exe.asc

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
-+-
 Reporter:  kT3Ycp9jwm   |  Owner:  tbb-
 |  team
 Type:  defect   | Status:
 |  needs_information
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tbb-proxy-bypass,|  Actual Points:
  TorBrowserTeam201906, GeorgKoppen201906|
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-

Comment (by kT3Ycp9jwm):

 on x64 I can't launch the exe, could you please post a zip?

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
-+-
 Reporter:  kT3Ycp9jwm   |  Owner:  tbb-
 |  team
 Type:  defect   | Status:
 |  needs_information
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tbb-proxy-bypass,|  Actual Points:
  TorBrowserTeam201906, GeorgKoppen201906|
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-

Comment (by kT3Ycp9jwm):

 can't try now, I'm on a 32bit pc

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
-+-
 Reporter:  kT3Ycp9jwm   |  Owner:  tbb-
 |  team
 Type:  defect   | Status:
 |  needs_information
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  TorBrowserTeam201905,|  Actual Points:
  GeorgKoppen201905, tbb-proxy-bypass|
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * cc: pospeselr (added)


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
-+-
 Reporter:  kT3Ycp9jwm   |  Owner:  tbb-
 |  team
 Type:  defect   | Status:
 |  needs_information
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  TorBrowserTeam201905,|  Actual Points:
  GeorgKoppen201905, tbb-proxy-bypass|
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * status:  new => needs_information


Comment:

 kT3Ycp9jwm: Could you test whether the following bundle fixes the problem
 for you? It should just disable looking for any GPO and loading associated
 policies:

 https://people.torproject.org/~gk/testbuilds/torbrowser-install-win64
 -30575_en-US.exe
 https://people.torproject.org/~gk/testbuilds/torbrowser-install-win64
 -30575_en-US.exe.asc

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
-+-
 Reporter:  kT3Ycp9jwm   |  Owner:  tbb-
 |  team
 Type:  defect   | Status:  new
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  TorBrowserTeam201905,|  Actual Points:
  GeorgKoppen201905, tbb-proxy-bypass|
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-

Comment (by gk):

 Some cypherpunks mentioned that comment:13:ticket:18101 could be promising
 her.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
-+-
 Reporter:  kT3Ycp9jwm   |  Owner:  tbb-
 |  team
 Type:  defect   | Status:  new
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  TorBrowserTeam201905,|  Actual Points:
  GeorgKoppen201905, tbb-proxy-bypass|
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * status:  needs_information => new


Comment:

 Replying to [comment:9 kT3Ycp9jwm]:
 > did you apply the GPO to a OU containing both user and computer?

 No, I think that's the piece I still need to figure out, thanks.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
-+-
 Reporter:  kT3Ycp9jwm   |  Owner:  tbb-
 |  team
 Type:  defect   | Status:
 |  needs_information
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  TorBrowserTeam201905,|  Actual Points:
  GeorgKoppen201905, tbb-proxy-bypass|
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-

Comment (by kT3Ycp9jwm):

 did you apply the GPO to a OU containing both user and computer?

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
-+-
 Reporter:  kT3Ycp9jwm   |  Owner:  tbb-
 |  team
 Type:  defect   | Status:
 |  needs_information
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  TorBrowserTeam201905,|  Actual Points:
  GeorgKoppen201905, tbb-proxy-bypass|
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * status:  new => needs_information


Comment:

 Okay, I tried for a while to set up a testing environment on my local
 computer and have the group policy editor used to lock down the proxy
 configurations in Firefox. However, this policy is neither applied to
 Firefox nor Tor Browser for me. I took the policy templates from
 https://github.com/mozilla/policy-templates/releases and copied them over
 to C:\Windows\PolicyDefinitions and then started the policy editor and
 activated the proxy option. What else do I need to do to get this going?
 Do I need some other tool making sure the respective users are under that
 policy or what am I missing here?

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
-+-
 Reporter:  kT3Ycp9jwm   |  Owner:  tbb-
 |  team
 Type:  defect   | Status:  new
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  TorBrowserTeam201905,|  Actual Points:
  GeorgKoppen201905, tbb-proxy-bypass|
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-

Comment (by kT3Ycp9jwm):

 Replying to [comment:6 gk]:
 > But either way, I think the underlying bug is that Tor Browser is
 affected by this Firefox policy at all and its proxy settings can get
 changed that way
 Yes, I think this is the point

 Using a local account, who does NOT receive the GPO, Tor Browser works.
 Using a domain user, who receives the GPO, Tor Browser does NOT work.

 Tor network settings (behind the onion button) are the same in both cases,
 so I think they are ok.
 The difference is in the connection settings (Menu --> Options --> Network
 proxy --> Settings): when the GPO applies, proxy settings are hijacked and
 I cannot revert them because they're locked.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
-+-
 Reporter:  kT3Ycp9jwm   |  Owner:  tbb-
 |  team
 Type:  defect   | Status:  new
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  TorBrowserTeam201905,|  Actual Points:
  GeorgKoppen201905, tbb-proxy-bypass|
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * keywords:   => TorBrowserTeam201905, GeorgKoppen201905, tbb-proxy-bypass
 * priority:  Medium => High
 * status:  needs_information => new


Comment:

 I suspect that did not work? I guess you could try selecting the SOCKS
 proxy option (instead of the HTTP/HTTPS one) in that case.

 But either way, I think the underlying bug is that Tor Browser is affected
 by this Firefox policy at all and its proxy settings can get changed that
 way (even if it seems to fail closed). I try to figure out what's up here.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
--+---
 Reporter:  kT3Ycp9jwm|  Owner:  tbb-team
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---
Changes (by kT3Ycp9jwm):

 * Attachment "tor_network_settings.PNG" added.

 Tor network settings

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
--+---
 Reporter:  kT3Ycp9jwm|  Owner:  tbb-team
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---

Comment (by kT3Ycp9jwm):

 in our proxy.pac the function FindProxyForURL(url, host) terminates with
 {{{
 return "PROXY proxy.***.local:8080";
 }}}

 so I set Tor Browser as in the tor_network_settings.PNG attached

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
--+---
 Reporter:  kT3Ycp9jwm|  Owner:  tbb-team
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---

Comment (by gk):

 So, Tor Browser has some built-in capabilities to deal with proxy
 requirements in e.g. enterprise networks. I wonder what happens if you try
 that out. Could you figure out the actual ip address:port being used (and
 the proxy type)? Then there is "Tor Network Settings..." -> "I use a proxy
 to connect to the Internet" behind the onion button on the toolbar where
 you could enter those settings.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
--+---
 Reporter:  kT3Ycp9jwm|  Owner:  tbb-team
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---

Comment (by kT3Ycp9jwm):

 Replying to [comment:2 gk]:
 > Hm. Did that work before and just Tor Browser 8.5 breaks now?

 no, it never worked since the policy was deployed (some months ago, but
 could manage to report it just today)

 I use it as a local account, who does not get the policy


 > The problem with GPOs is that it seems Tor Browser is happily following
 whatever the GPO is telling it. That means this could lead to a proxy
 bypass, see: #29916. We therefore set:
 `browser.policies.testing.disallowEnterprise` to `true`.

 just checked: it's already set to true, as default value

 > Does flipping that pref get things working for you again?

 unfortunately not

 > Where does the PAC file actually point to?

 proxy.pac is on an internal server domain.local/proxy.pac

 I am using Tor Browser 8.5 (based on Mozilla Firefox 60.7.0esr) (32-bit),
 updated today just before taking screenshots

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30575 [Applications/Tor Browser]: "unable to connect" if Firefox GPOs configure proxy settings

[Tor Bug Tracker & Wiki]

#30575: "unable to connect" if Firefox GPOs configure proxy settings
--+---
 Reporter:  kT3Ycp9jwm|  Owner:  tbb-team
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---
Changes (by gk):

 * cc: tom (added)
 * status:  new => needs_information
 * component:  - Select a component => Applications/Tor Browser
 * owner:  (none) => tbb-team


Comment:

 Hm. Did that work before and just Tor Browser 8.5 breaks now? The problem
 with GPOs is that it seems Tor Browser is happily following whatever the
 GPO is telling it. That means this could lead to a proxy bypass, see:
 #29916. We therefore set: `browser.policies.testing.disallowEnterprise` to
 `true`. Does flipping that pref get things working for you again? Where
 does the PAC file actually point to?

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs