Steps
- Record the real device address—such as 192.168.x.x, 10.x.x.x or a local hostname—and confirm it works with the proxy off.
- Keep localhost, 127.0.0.1 and required private ranges in the system proxy bypass list. Do not leave that field empty.
- Route private IP and LAN domains to direct. Under TUN, also inspect strict route and automatic-route options.
- Retest by IP first and hostname second. If IP works but the name fails, focus on DNS rather than the proxy server.
Why this matters
LAN traffic should never leave the local network. Explicit direct rules improve reliability and avoid exposing internal destinations to a remote proxy.
How to verify
Router administration, NAS access and printer discovery work while proxying; logs show these connections using direct.
Things to watch
Do not bypass huge public ranges by guesswork. Enterprise networks may use custom ranges; add only what you can identify.