• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Chrome Remote Desktop connection problem with Squid

Scheduled Pinned Locked Moved Cache/Proxy
2 Posts 1 Posters 1.1k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • V
    viberua
    last edited by Aug 27, 2020, 9:18 AM

    Hi, all.
    I have problem with Chrome Remote Desktop connection.
    We have pfsense last release and updated squid, squidguard. Using LDAP authorisation and MITM. I have added my.local.ip/32 to ACLs>Unrestricted IPs and Authentication >Subnets That Don't Need Authentication.
    I have enabled ipv4+ipv6 in Listen IP Version
    I have added 74.125.247.128 to whitelist as regexp 74.125.247.128
    But when i try to connect to remote pc i have error with MITM enabled

    my.local.ip TCP_DENIED_ABORTED/200 0 CONNECT [2001:4860:4864:4:8000::]:3478 - HIER_NONE/- -
    my.local.ip TCP_DENIED_ABORTED/200 0 CONNECT 74.125.247.128:3478 - HIER_NONE/- -
    

    and with disabled MITM mode

    my.local.ip TCP_DENIED/403 3738 CONNECT 74.125.247.128:3478 - HIER_NONE/- text/html
    my.local.ip 192.168.207.140 TCP_DENIED/403 3787 CONNECT [2001:4860:4864:4:8000::]:3478 - HIER_NONE/- text/html
    

    i tried google this issue but no luck.
    Please give advice

    1 Reply Last reply Reply Quote 0
    • V
      viberua
      last edited by Dec 3, 2020, 12:41 PM

      Fresh news.
      When MITM enabled in Splice all mode - Chrome Remote Desktop is connecting.
      Even with removed ip 74.125.247.128 from ACL whitelist.
      Will try to compare config with this two modes and add this ip to exclusion list.

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
        This community forum collects and processes your personal information.
        consent.not_received