Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I found that the behavior of Firefox on proxy server side is quite different from what I expected.

I thought that you can bypass local traffic by putting local address range, such as 192.168. But I discovered that it is not enough, you have to put DNS names of the server also.

Say that I have a local server testwww. If I don't out testwww into the bypass list, the traffic will go through proxy server.

Is this by design?

share|improve this question

Proxy rules work on what you enter into URL field of the browser.

If you enter "", nobody knows that whether it's in or not.

The domain name will get resolved only by the one who actually connects to the server: if proxied, it will be proxy, if not, it will be your browser.

This is why you have to use patterns that will match your input into URL field for proxy config (i.e. testwww, *, ...), and not what comes out as a result of domain name resolution.

I hope this answers your question.

share|improve this answer

After struggling through mozilla bug 72444, I discovered that you can add <local> as the name of a host to exclude in the list of proxy exceptions. That will exclude all hostnames that does not contain a dot.

share|improve this answer

You put in the local address range like this ?

share|improve this answer

Yes. It is by design. AFAIK, this is true for any service/software that uses proxy.

If you follow a proper FQDN structure while naming your hosts/virtual hosts, then you can easily circumvent this by adding your sub-domain name to the no-proxy list. For example adding the domain suffic '' will ensure that access will be made locally, and NOT via the proxy server for all hosts sitting under (,

share|improve this answer

for more flexible control, use the foxyproxy plugin which supports whitelists and other advanced pattern matching to decide when and which proxies to use.

share|improve this answer

IE performs differently. I just checked and found that IE connects to the local server directly.

We currently enter machine name in the location bar without domain name - for example testwww not And we have an internal DNS and an external DNS for our company domain.

Is the Firefox implement standard defined (whitelist domain names instead of IP ranges)?

share|improve this answer

Yes. Put simply, this feature matches the string of the hostname or IP address. It does not lookup the hostname and do comparison of the found IP address.

That is a feature request that has been around for some time. See bug 136789

The actual documentation for this is pretty comprehensive.


should answer a lot of the detailed questions. NOTE: I wrote the original article that the source for these.

share|improve this answer

I would like to add little more to the topic. In IE, when we bypass a domain like *; we can access any machine abc(whose entry is there in local dns). In case of forefox, is supposed to do the trick ,but it fails. This is the case for last many versions of firefox.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.