# Cannot reach mozilla.org through proxy

**URL:** <https://community.ipfire.org/t/cannot-reach-mozilla-org-through-proxy/1156>\
**Category:** Web Proxy, URL Filter & Update Accelerator\
**Created:** [5 February 2020 17:24 UTC](https://community.ipfire.org/t/cannot-reach-mozilla-org-through-proxy/1156 "2020-02-05T17:24:02Z")\
**Posts on this page:** 1\
**Showing post:** 17

<div class="post-metadata">

**Author:** ![linus](https://community.ipfire.org/user_avatar/community.ipfire.org/linus/32/314_2.png) [@linus](https://community.ipfire.org/u/linus)\
**Post date:** [7 February 2020 01:26 UTC](https://community.ipfire.org/t/cannot-reach-mozilla-org-through-proxy/1156/17 "2020-02-07T01:26:58Z")

</div>

> [@xperimental](#):
>
> Why do you allow HTTPS in that group? Delete it.

You are probably right. As I want to block all HTTPS not going through the proxy (which is what rule 7 is for, if activated), there is no need to allow HTTPS again in another rule.

> [@xperimental](#):
>
> Also delete rule 7. That’s already done by your default forward communication setting.

Hm, but enabling rule 7 thus far seems to be the only thing that blocks non-proxied HTTPS for me. My goal is that no HTTPS can be used without the proxy’s url filter. Are you saying my default forward communication setting should already be blocking HTTPS?

> [@xperimental](#):
>
> And why do you block @ default all outgoing firewall communication just to allow all again? In my opinion it’s not a good idea to allow all outgoing communication since there are just a few ports needed for regular use.

So you are saying, I should make the firewall rules more restrictive? Which rules are you referring to in particular? Again: it was not me who set up this firewall and I am quite new to the subject matter…

> [@xperimental](#):
>
> Try another DNS server

In my other post I have been warned to

> [@URL filter for HTTPS](https://community.ipfire.org/t/url-filter-for-https/1070/20):
>
> _Never_ use DNS servers that you _do not_ trust

So which one would you recommend?

Thanks again!

---

_[View the full topic](https://community.ipfire.org/t/cannot-reach-mozilla-org-through-proxy/1156)._
