Cannot reach mozilla.org through proxy

[linus (Linus F.)]

@xperimental

Why do you allow HTTPS in that group? Delete it.

You are probably right. As I want to block all HTTPS not going through the proxy (which is what rule 7 is for, if activated), there is no need to allow HTTPS again in another rule.

@xperimental

Also delete rule 7. That’s already done by your default forward communication setting.

Hm, but enabling rule 7 thus far seems to be the only thing that blocks non-proxied HTTPS for me. My goal is that no HTTPS can be used without the proxy’s url filter. Are you saying my default forward communication setting should already be blocking HTTPS?

@xperimental

And why do you block @ default all outgoing firewall communication just to allow all again? In my opinion it’s not a good idea to allow all outgoing communication since there are just a few ports needed for regular use.

So you are saying, I should make the firewall rules more restrictive? Which rules are you referring to in particular? Again: it was not me who set up this firewall and I am quite new to the subject matter…

@xperimental

Try another DNS server

In my other post I have been warned to

@ms

Never use DNS servers that you do not trust

So which one would you recommend?

Thanks again!