Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - pooms

Pages: 1 2 3 [4] 5
46
Questions and Answers / 4.3 Crashing and Hanging
« on: June 11, 2002, 03:36:38 PM »
I started using 4.3 last night and have run into a couple of
crashes and one case where it hung and I had to kill it
through the Task Manager.

The first time it died, I wasn't paying attention, so I'm not sure
what was the cause. The second time, though, I figured out the what
happened and can repeat it. If you scroll all the way to the bottom
of either the Web Page or Header filters lists, there is a strip
of grey below the very last entry. I was trying to unselect the
last filter entry and clicked a bit too low in the dark grey area
below the checkbox. That killed Proxomitron.

I managed to hang 4.3 twice in the same manner, so this may also
be repeatable. I was switching between configuration files and
had selected File/Load Config File and clicked to open the new Config
file I wanted to load. I hadn't noticed, but there was one active
connection, and I got the warning dialogue with the Retry, Kill
Connections options. It didn't seem like there was any good reason
for there to be an active connection, so I selected the kill
connections option. At that point it completely froze. It wasn't
taking up any CPU time, but there was nothing I could do other
than kill it through the Task Manager.

Other than these problems (which can easily be avoided) I haven't
run into anything else.

 

47
Questions and Answers / Going nowhere fast
« on: June 10, 2002, 11:42:45 PM »
Yes! I was tempted to send an email to the yahoo group to see if
the site was down. But I was having other problems this morning
so I wasn't sure whether it was a site-specific problem or not.
(or the fact that I'd changed my User-Agent to "bob" )

 

48
Questions and Answers / Holmes/Who
« on: June 10, 2002, 07:10:44 AM »
Well, the "SpaceBison" User-Agent is enough get "Proxomitron Used"
and the "Lynx 2.8" User-Agent gets "AtGuard/NIS or Proxomitron used"

 

49
http://story.news.yahoo.com/news?tmpl=story&ncid=70&e=3&cid=70&u=/cn/20020608/tc_cn/934089

 
quote:
The simplified home page is meant to accentuate advertisements

 
quote:
The page's redesign would further accentuate interactive types of advertisements on the site


a test of our proxomitron filter-writing skills




50
Microsoft Help / New 'Windows Update'...
« on: June 09, 2002, 06:50:38 AM »
Incidently, if you want to see the XML SOAP messages that are
being POSTed to windowsupdate containing information about
your computer, turn on "View Posted Data" in
the HTTP Message Log. Too bad Proxomitron can't apply filters
to outgoing request contents, or we could write filters to
manage what we want microsoft to see (why do they need to
know how much free disk space I have on each of my drives???)


 

51
Microsoft Help / New 'Windows Update'...
« on: June 08, 2002, 05:05:03 AM »
Thanks for the $FILTER tip, I hadn't noticed that one before.
Maybe you did the same thing I did: I tried to access Windows
Update with all my normal filters on and found something was
causing an error on the page.

Here's my current conclusions about accessing Windows Update
with Windows 2000 through Proxomitron.

You don't need to put Windows update in your bypass list if:


And it appears that you can safely put the site wustat.windows.com
in your kill file without affecting Windows Update. The parameters
of the URL sent to this site look suspiciously like they are being
used to track user information.

I'll post this over on the proxlist group, although I'm a member, there
are too many messages to read there so I rarely do.

 

52
Microsoft Help / New 'Windows Update'...
« on: June 08, 2002, 02:54:28 AM »
I found how to make Windows Update work for me with Proxomitron 4.2.
I ended up using the Network Monitor to capture TCP/IP packets and I
compared what happened when I went direct to the windows update site
and when I went through Proxomitron with Proxomitron in bypass mode.
What I found was that this HTTP HEAD command:

HEAD /v4/iuident.cab?0206080135 HTTP/1.0

contained a Pragma: no-cache header when sent by Proxomitron, but
when sent direct from IE6.0 it had a Cache-Control: no-cache
header instead.

So I took Proxomitron out of bypass mode, turned on the
"Pragma: Don't force reloads (out) filter" (which removes the
Pragma: no-cache header) and that fixed it.

In fact, (this just dawned on me) with this change, I now seem to
have Proxomitron working on the Windows Update site WITHOUT
putting the site in the bypass list!!!


 

53
Microsoft Help / New 'Windows Update'...
« on: June 07, 2002, 08:26:28 PM »
When I looked at the Message Log I saw there was one other
machine involved during the windows update, one called
wustat.windows.com I thought maybe I had to add that to
the bypass list, but no.

Actually wustat.windows.com might be a candidate for the kill
list. The URL sent to it from my machine looks like this:
GET /wutrack.bin?U=add54a1f5e121046a25c90a70f171ac6&C=IU_SITE&A=n&I=&D=&P=5.0.893.2.0.3.0&L=en-US&S=f&E=80072f76&M=&X=020607192252883 HTTP/1.0

and it returns a single byte, which makes me suspicious. Although the
error code I got is embedded in it, so maybe it is just reporting the error.

 

54
Microsoft Help / New 'Windows Update'...
« on: June 07, 2002, 07:50:08 PM »
It doesn't work for me with W2K Server SP2. I keep getting
an error 0x80072F76. I get this even with Proxomitron in
bypass mode, but if I take out the proxy settings in IE6
and go direct to windows update it works. I haven't figured
out why putting Proxomitron in the middle, even in bypass
mode, would cause this.

 

55
Other / Response Headers
« on: May 28, 2002, 04:29:36 PM »
Perhaps the HTTP RFC describes what you want to know:
http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14

 

56
SSL / SSL Files
« on: May 28, 2002, 01:24:40 AM »
What a pain trying to find the correct versions! I tried "borrowing"
the dll's from a number of Apache web server installations that I
have, but all of them were too new. Eventually I got a couple of
dll's that work. Here is where I got them from:
http://packetstormsecurity.org/crypt/SSL/stunnel/ssleay32.dll
http://packetstormsecurity.org/crypt/SSL/stunnel/libeay32.dll

 

57
Questions and Answers / Configuring Java clients to use HTTP Proxy
« on: May 28, 2002, 01:16:16 AM »
Just to follow up on this further, with java 1.4 installed I am able to
cause my Java client to send HTTP and HTTPS traffic through Proxomitron
by setting the following properties on the command line:

-Dhttp.proxyHost=localhost
-Dhttp.proxyPort=8080
-Dhttps.proxyHost=localhost
-Dhttps.proxyPort=8080

 

58
Questions and Answers / Prox 4.2 using 100% CPU
« on: May 22, 2002, 01:59:42 AM »
Actually, I'm a developer of enterprise applications running Java on
Windows & Unix machines. So far I've never had a virus being the cause
of a problem like yours. But you're right, anyone administrating a
pure microsoft enterprise computing environment had better be prepared
to suspect viruses as a cause of unusual behaviour like that.

As for Scott's comments about active connections, I've always assumed
that the count should fall back to zero after some period of time, but
usually I've noticed that I have 2 active connections far after the
last http activity. I've never figured out why that is.




 

59
Privacy / block confimax email delivery confirmation
« on: May 21, 2002, 06:44:12 PM »
Recently I've received a few email spams that use the confimax automatic email
delivery confirmation service:
http://www.confimax.com/
The HTML email contains the following text:
<a href="http://www.confimax.com/intro2.php"><img src="http://www.confimax.com/pickup.php/5d511fe216e6472b3487b10fd38a94d3" border="0" alt="Delivery confirmed by confimax.com"></a>
I've now placed www.confimax.com in my kill list, hopefully spammers
using this service will now think that emails to my address never get
read

 

60
Questions and Answers / Prox 4.2 using 100% CPU
« on: May 21, 2002, 06:21:25 PM »
I think I ran into the 100% cpu use with Prox 4.1, but never since I
installed 4.2. I'm running W2K Server SP2 on my laptop.

As for the comment that 100% cpu usage is always a virus, that's
silly. I've accidently written enough infinite-loop programs in
my time to know that it is certainly possible to trigger a
hidden infinite-loop bug in a program. I recently triggered an
100% cpu utilization problem between oracle database and
a java application server.

I also managed to trigger a 100% cpu utilization bug in Proxo
by a badly designed filter. I was playing with redirecting
GET requests for favicon.ico, which are triggered from MSIE
whenever you bookmark a site. Unfortunately I managed to
trigger an infinite loop between MSIE and Proxo by using
$JUMP!

 

Pages: 1 2 3 [4] 5