Can't access LAN IP using domain when lockdown

[Onxr]

Upstream DNS : NextDNS (DNS rewrites enabled)
Relevant toggled on settings

• Don't route private IPs
• Proxy lockdown

Universal trusted IP & Domain

• 192.168.0.0/16
• *.subdomain.duckdns.org

Dynamic DNS provider blocklist enabled.

I'm trying to access a local CalDAV server using KashCal and I'm getting proxy error.

I think even when lockdown it should bypass private IPs or at least let us have app specific toggle for it, so it bypasses proxy for private IPs.

I know bypass proxy for specific app is available but that doesn't work when lockdown is enabled. I think we should be able to use that toggle even when proxy lockdown is toggled on.

[ignoramous]

Proxy Lockdown is a global killswitch. Proxy-specific "Lockdown" killswitches can be turned on for respective WireGuard configurations (if running in Advanced mode).

[Onxr]

Proxy Lockdown is a global killswitch.

I can access LAN by IP though is it intended then ?

[ignoramous]

Depends. Is Configure -> Network -> Do not route Private IPs turned on? If not, and if the traffic is flowing through Rethink's tunnel, it should have blocked it if it wasn't proxied by any of the active WireGuards or HTTP/SOCKS5 tunnels.

[Onxr]

Oh I see. So it is intentional. With Proxy Lockdown as global killswitch if used IP then I can access LAN but if domain was resolved to Private IP then I will get proxy error right ?
If yes then I guess you can close this issue.

[ignoramous]

So it is intentional. With Proxy Lockdown as global killswitch if used IP then I can access LAN but if domain was resolved to Private IP then I will get proxy error right

If and only if Configure -> Network -> Do not route Private IPs is turned on. Is that the case for you? If not, it is a killswitch "leak" which we will want to fix on priority.

[Onxr]

Configure -> Network -> Do not route Private IPs is turned on

Yes. It is. But I didn't understand why IP works and domain doesn't because both goes to same destination, aren't they ?