Claude Code egress proxy regression 403s all hosts even with "All domains" allowlist
thor3 · ghdev · 2026-09-11
A regression bug (issue #93562) in anthropics/claude-code: with network egress ON and domain allowlist set to "All domains", the session egress proxy still rejects every host outside a small built-in list with 403 on CONNECT.
- The break happened between 2026-09-10 and 09-11: all 18 of the author's daily Cowork scheduled tasks stopped producing output on 09-11, yet each run is still recorded as SUCCEEDED.
- From the cloud container, a self-hosted API, news.google.com, and example.com are blocked while api.github.com works; the proxy reports plain allowlist mode.
- The local Cowork VM enforces the same policy with no fallback, and non-HTTP(S) traffic like IMAP (port 993) isn't covered by the allowlist at all, breaking mailbox-reading tasks.
- The author links it to the same root cause as #34690, #30112 and #51400: the proxy JWT carries a fixed allowedhosts list that ignores the "All domains" setting.
More from coding & agent
- Researcher predicted multi-agent hidden coordination failure mode a year ago — it's now real — tianshi_li · 2026-09-12
- Dev uses AI to build a macOS widget for Fahrenheit-Celsius conversion, iterating past the 'AI slop' stage — floguo · 2026-09-12
- NoSpoon agent autonomously cranks out hilarious AI microdramas, 40-min episodes coming — Kyrannio · 2026-09-12
- Minecraft survival bot masters walking but keeps dying to night drifters; burrow goal next — zeeg · 2026-09-12
- LinkedIn user claims GPT-6 built a pixel-perfect Figma design system in 3 hours — AIandDesign · 2026-09-12
- OpenAI to co-host 'Agents, Everywhere' one-day hackathon across 50 cities on Sep 12 — seanmcdonaldxyz · 2026-09-12