Claude Code egress proxy regression 403s all hosts even with "All domains" allowlist
thor3 · ghdev · 2026-09-11
A regression bug (issue #93562) in anthropics/claude-code: with network egress ON and domain allowlist set to "All domains", the session egress proxy still rejects every host outside a small built-in list with 403 on CONNECT.
- The break happened between 2026-09-10 and 09-11: all 18 of the author's daily Cowork scheduled tasks stopped producing output on 09-11, yet each run is still recorded as SUCCEEDED.
- From the cloud container, a self-hosted API, news.google.com, and example.com are blocked while api.github.com works; the proxy reports plain allowlist mode.
- The local Cowork VM enforces the same policy with no fallback, and non-HTTP(S) traffic like IMAP (port 993) isn't covered by the allowlist at all, breaking mailbox-reading tasks.
- The author links it to the same root cause as #34690, #30112 and #51400: the proxy JWT carries a fixed allowedhosts list that ignores the "All domains" setting.
More from coding & agent
- Indie dev hits $12K MRR-month with Skillry by validating before vibe coding — yihui_indie · 2026-10-28
- Anthropic team kills LeetCode interviews: no longer provides signal — soumitrashukla9 · 2026-10-28
- One-person companies are about the org chart, not headcount: humans judge, agents execute — ciguleva · 2026-10-28
- OATs: open-source toolkit turns everyday objects into personality-bearing agents — Stefania_druga · 2026-10-28
- Dev: local coding dropped from 100% to 5% in a year as cloud agents take over — bytebot · 2026-10-28
- Open-sourced 501(c)(FREE): agent-built free back office for US nonprofits — gralston · 2026-10-28