Blue Coat Systems Time Clock Proxy SG Manuale Utente

Chapter 3: Condition Reference

109

proxy.address=

Tests the destination address of the arriving IP packet. The expression can include an IP address or 
subnet, or the label of a subnet definition block.

If the transaction was explicitly proxied, then 

proxy.address=

 tests the IP address the client used to 

reach the proxy, which is either the IP address of the NIC on which the request arrived or a virtual IP 
address. This is intended for situations where the proxy has a range of virtual IP address; you can use 

proxy.address=

 to test which virtual IP address was used to reach the proxy. 

If the transaction was transparently proxied, then 

proxy.address=

 tests the destination address 

contained in the IP packet. Note that this test may not be equivalent to testing the 

server_url.address

. The 

server_url.address

 and 

proxy.address

 conditions test different 

addresses in the case where a proxied request is transparently intercepted: 

server_url.address=

 

contains the address of the origin server, and 

proxy.address=

 contains the address of the upstream 

proxy through which the request is to be handled.

proxy.card=

 functions correctly for transparent transactions.

Replaces: 

proxy_address=

proxy.address=ip_address|subnet|subnet_label 

where:

•

—NIC IP address or subnet; for example, 10.1.198.54.

•

—A subnet mask; for example, 10.1.198.0/24

•

—Label of a subnet definition block that binds a number of IP addresses or subnets.

•

Use  in 

<Admin>

, 

<Proxy>

, and 

<Forward>

 layers.

•

Applies to proxy transactions.

; Service should be denied through proxy within the subnet 1.2.3.x.

<proxy>

proxy.address=1.2.3.0/24 deny

•

Conditions: 

client.address=

, 

client.protocol=

, 

proxy.card=

, 

proxy.port=

 

•

Definitions: 

define subnet