Author Topic: Web Shield blocks server even after adding an exception  (Read 2755 times)

0 Members and 1 Guest are viewing this topic.

Offline diresu

  • Newbie
  • *
  • Posts: 2
Web Shield blocks server even after adding an exception
« on: January 14, 2021, 08:35:56 PM »
Hi,

I am programming with Flutter - and whenever I do something like 'flutter upgrade' or 'flutter pub get' I get the following error message:

> MSG : It looks like pub.dartlang.org is having some trouble.

When deactivating the Weg Shield, however, everything works just fine.

I added 'pub.dartlang.org' to the Web Shield exceptions but this doesn't help.

Where is the problem and how can I stop avast to block my commands?

Thanks for your help,
Dietrich

PS: I am using Avast Security on a MacBook Pro running on macOS Big Sur.

Offline ondrej.kolacek

  • Avast team
  • Sr. Member
  • *
  • Posts: 394
Re: Web Shield blocks server even after adding an exception
« Reply #1 on: January 15, 2021, 05:32:15 PM »
Hello,

thanks for reporting this to us.

The issue is in Apple's Transparent Proxy Network Extension framework. This framework, which we have to use on Big Sur as the old kext interface is no longer working, is still quite buggy unfortunately.

To explain how Transparent Proxy works: we specify ports we want to intercept to scan web traffic. When a connection is being established, a callback is invoked in our system extension. Since the callback does not originate from a browser in this case, we answer "we are not interested in it, please pass it though!" return value. However, the resulting connection is not good enough for flutter and the error occurs. I am not sure why exactly flutter fails.

We have reported similar issue to Apple previously (https://forum.avast.com/index.php?topic=239798.0) and they have seemed to fix it in MacOS 11.2 beta2, however this issue is a different one, as it occurs even when our system extension is the only Network Extension system extension on the machine. It is also NOT fixed in 11.2 beta2.

Please note that this seems to happen with multiple Antivirus products and other security products which use Transparent Proxy Network Extension.

I have filed a bug to Apple. The only workaround is to disable either Web Shield, or scanning of ssl connections in web shield. There is unfortunately no way for us how to work around this issue, we will have to wait for Apple to fix this.

Kind regards,
Ondrej Kolacek

Offline diresu

  • Newbie
  • *
  • Posts: 2
Re: Web Shield blocks server even after adding an exception
« Reply #2 on: January 17, 2021, 08:31:42 PM »
Hi Ondrej,

Thank you for your help and a great answer!

So I'll wait.  Do you have a reference to the apple bug report, so that I could have a look on what is happening and when it will be fixed?

Kind regards,
Dietrich

Offline ondrej.kolacek

  • Avast team
  • Sr. Member
  • *
  • Posts: 394
Re: Web Shield blocks server even after adding an exception
« Reply #3 on: January 18, 2021, 09:04:06 AM »
Hello,
unfortunately Apple's bug tracking system is intentionally private (you only see issues reported by yourself).
Kind regards,
Ondrej Kolacek