Error Connecting from Work Laptop with ZScaler To HA Ising DuckDNS

Configuration Frontend
1

Hi,

I am trying to connect to my Home assistant via my work laptop. I have set-up DuckDns successfully and can connect to my HA instance at home and outside on both phone, computers tablets both in and outside of my network. My work laptop uses ZScaler vpn and when I try to connect to HA via my work laptop I get the following error:

Host Not Found

DNS error (the host name of the page you are looking for does not exist) or Server did not accept the connection.

Please check that the host name has been spelled correctly.

In the logs I could also see an error stating that a non approved proxy IP address was connecting. With a bit of research I found this page from ZScaler ZScaler Hubs and I subsequently whitelisted all the recommeded IP addresses.

A restart of HA and everything worked.

Question: Whilst I have achieved my intended result, have I done it in the right way? I do travel a lot internationally with work (hence opening all the recommended IP’s) rather than just the ones in my country.

Lastly - i added this so that anyone suffering the same problem with ZScaler had a searchable solution.

3

Are you also shrub100?

4

This was the error I was getting from the logs - again to help others search for a solution:

Logger: homeassistant.components.http.forwarded
Source: components/http/forwarded.py:125
Integration: HTTP (documentation, issues)
First occurred: 10:27:34 (5 occurrences)
Last logged: 10:27:58

Received X-Forwarded-For header from an untrusted proxy 165.225.81.116

5

I am not sure what I am doing, but I keep getting an Unable to connect to Home Assistant error.
image
I only added the active broker ip for now for testing (165.225.0.0/17) to the trusted_proxies. Also I can’t really find this proxy error… maybe something else I am doing wrong?

1 Like