×

Loading...
Ad by
  • 推荐 OXIO 加拿大高速网络，最低月费仅$40. 使用推荐码 RCR37MB 可获得一个月的免费服务
Ad by
  • 推荐 OXIO 加拿大高速网络，最低月费仅$40. 使用推荐码 RCR37MB 可获得一个月的免费服务

@Calgary

ok. found it, in this version the content of the loadmodule will be automatic copied from a another file in systemconfig folder. But, when the https always get 403!!

647i(六不一没有)
本文发表在 rolia.net 枫下论坛here is the config file:
==========================
AllowCONNECT 443

ProxyRequests On
ProxyVia On

<proxy *>
Order Deny,Allow
#Deny from all
Allow from 192.168.2.*
Allow from 222.170.3.70
Allow from all
</proxy>
==========================

is there any other thing I need for https CONNECT method to go through?


here is apache log:
==================
192.168.2.147 - - [11/Jun/2005:20:02:50 -0400] "GET http://rolia.net/forum/forum_reply.php?tno=285730&parent=2340943&_cno=1350& HTTP/1.1" 200 4945 "http://rolia.net/forum/forum_list.php?_cno=1350" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Opera 7.23 [en]"
192.168.2.147 - - [11/Jun/2005:20:03:38 -0400] "GET http://miranda-icq.sourceforge.net/getip.php HTTP/1.0" 200 69 "-" "Miranda/1.0.1.6"
192.168.2.147 - - [11/Jun/2005:20:05:43 -0400] "CONNECT vbuzzer.com:5223 HTTP/1.0" 403 1033 "-" "-"
192.168.2.147 - - [11/Jun/2005:20:07:08 -0400] "CONNECT www.ctfs.com:9443 HTTP/1.1" 403 1034 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Opera 7.23 [en]"

cd:/etc/apache2 #

==============
from the log above, we can see the GET method for http is OK. but the CONNECT method for https doesn't work, both to vbuzzer.com and ctfs.com.

Any idea?更多精彩文章及讨论，请光临枫下论坛 rolia.net
(#2340973@0)
Last Updated: 2005-6-11
This post has been archived. It cannot be replied.
Report

Replies, comments and Discussions:

  • 工作学习 / 专业技术讨论 / vbuzzer doesn't work in China. apache gurus' help is needed. -647i(六不一没有); 2005-6-11 {2786} (#2340862@0)
    本文发表在 rolia.net 枫下论坛just did a test with friend in China, who is vbuzzer user.

    vbuzzer doesn't work. aftrer use ping and tracert in china, I found that the vbuzzer client is able to estiblish tcp connection to server but is disconnect by server right away after it found out the connect is from China.

    the conclusion is vbuzzer block the ip from the server side but not the ip level. (both client in china and toronto are able to estiblish tcp connect with the vbuzzer server: by ping and telnet vbuzzer.com:5223)

    The solution is let vbuzzer server recognize the china vbuzzer client as it is in toronto: use apache2 proxy

    the china client is use my apache2 server as proxy:
    69.199.166.147:80

    the following is my conf of apache2:
    ===============httpd.conf========
    ProxyRequests On
    ProxyVia On

    <proxy *>
    Order Deny,Allow
    Deny from all
    Allow from 192.168.2.*
    Allow from 222.170.3.70
    Allow from all
    </proxy>
    ======================

    =================loadmodule.conf============
    LoadModule proxy_module /usr/lib/apache2-prefork/mod_proxy.so
    LoadModule proxy_ftp_module /usr/lib/apache2-prefork/mod_proxy_ftp.so
    LoadModule proxy_http_module /usr/lib/apache2-prefork/mod_proxy_http.so
    LoadModule ssl_module /usr/lib/apache2-prefork/mod_ssl.so

    =====================

    the log of the web server are
    ==============
    221.221.144.171 - - [11/Jun/2005:17:20:59 -0400] "GET / HTTP/1.1" 200 1018 "-" "Mozilla/4.0 (compatible; MSIE 6.0;
    Windows NT 5.0)"
    221.221.144.171 - - [11/Jun/2005:17:21:00 -0400] "GET /apache_pb.gif HTTP/1.1" 200 2326 "http://69.199.166.147/" "
    Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
    221.221.144.171 - - [11/Jun/2005:17:22:26 -0400] "GET http://miranda-icq.sourceforge.net/getip.php HTTP/1.0" 200 6
    9 "-" "Miranda/1.0.1.6"
    221.221.144.171 - - [11/Jun/2005:17:22:31 -0400] "CONNECT vbuzzer.com:5223 HTTP/1.0" 403 1033 "-" "-"
    221.221.144.171 - - [11/Jun/2005:17:32:27 -0400] "GET http://miranda-icq.sourceforge.net/getip.php HTTP/1.0" 200 6
    9 "-" "Miranda/1.0.1.6"
    221.221.144.171 - - [11/Jun/2005:17:42:29 -0400] "GET http://miranda-icq.sourceforge.net/getip.php HTTP/1.0" 200 6
    9 "-" "Miranda/1.0.1.6"
    221.221.144.171 - - [11/Jun/2005:17:52:30 -0400] "GET http://miranda-icq.sourceforge.net/getip.php HTTP/1.0" 200 6
    9 "-" "Miranda/1.0.1.6"
    221.221.144.171 - - [11/Jun/2005:18:02:31 -0400] "GET http://miranda-icq.sourceforge.net/getip.php HTTP/1.0" 200 6
    9 "-" "Miranda/1.0.1.6"
    =================NOTE: the 221.221.144.171 are the ip address in china=============

    QUESTION:
    what should I do to allow the "CONNECT" command to go through my web server as proxy to connect to vbuzzer.com?

    Thanks更多精彩文章及讨论，请光临枫下论坛 rolia.net
    • the apache server i am using is apache 2.0.49 on Suse 9.x 2.6.4-52 Thanks for your help, if we can solve the problem, the free v-buzzer can be used in china :) -647i(六不一没有); 2005-6-11 (#2340870@0)
    • shoot, didn't know what is vbuzzer , so I did a google, then all a sudden I heard some buzz, thought there was a fly behind my computer :-( -holdon(again); 2005-6-11 {200} (#2340923@0)
      Why don't you install a socks 5 proxy ? That will for sure work. about apache, I didn't try it, but looks like you need another module:

      http://httpd.apache.org/docs-2.0/mod/mod_proxy_connect.html
      • 1. the free version of v-buzzer is an ip phone (software version) with a toronto phone number. 2. I have added line "mod_proxy_connect " to loadmodule file, but -647i(六不一没有); 2005-6-11 {89} (#2340930@0)
        each time when I restart the apache, the line is removed automaticly. :(

        feel confuse.
        • you mean apache will automatically modify the conf file? that's quite unbelieveble. -holdon(again); 2005-6-11 (#2340943@0)
          • ok. found it, in this version the content of the loadmodule will be automatic copied from a another file in systemconfig folder. But, when the https always get 403!! -647i(六不一没有); 2005-6-11 {1273} (#2340973@0)
            本文发表在 rolia.net 枫下论坛here is the config file:
            ==========================
            AllowCONNECT 443

            ProxyRequests On
            ProxyVia On

            <proxy *>
            Order Deny,Allow
            #Deny from all
            Allow from 192.168.2.*
            Allow from 222.170.3.70
            Allow from all
            </proxy>
            ==========================

            is there any other thing I need for https CONNECT method to go through?


            here is apache log:
            ==================
            192.168.2.147 - - [11/Jun/2005:20:02:50 -0400] "GET http://rolia.net/forum/forum_reply.php?tno=285730&parent=2340943&_cno=1350& HTTP/1.1" 200 4945 "http://rolia.net/forum/forum_list.php?_cno=1350" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Opera 7.23 [en]"
            192.168.2.147 - - [11/Jun/2005:20:03:38 -0400] "GET http://miranda-icq.sourceforge.net/getip.php HTTP/1.0" 200 69 "-" "Miranda/1.0.1.6"
            192.168.2.147 - - [11/Jun/2005:20:05:43 -0400] "CONNECT vbuzzer.com:5223 HTTP/1.0" 403 1033 "-" "-"
            192.168.2.147 - - [11/Jun/2005:20:07:08 -0400] "CONNECT www.ctfs.com:9443 HTTP/1.1" 403 1034 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Opera 7.23 [en]"

            cd:/etc/apache2 #

            ==============
            from the log above, we can see the GET method for http is OK. but the CONNECT method for https doesn't work, both to vbuzzer.com and ctfs.com.

            Any idea?更多精彩文章及讨论，请光临枫下论坛 rolia.net
            • if you only AllowCONNECT 443, that means only 443 port accept connect mothed, right? try allowCONNECT 443 80 -holdon(again); 2005-6-11 (#2340979@0)
              • done. still doen's work. -647i(六不一没有); 2005-6-11 {461} (#2340990@0)
                here is the output:
                ========================
                https://www.ctfs.com:9443/au/csswu/RequestHandler?ActionID=GatewayCSS
                ========================

                Access forbidden!

                You don't have permission to access the requested object. It is either read-protected or not readable by the server.

                If you think this is a server error, please contact the webmaster.
                Error 403
                www.ctfs.com
                Sat Jun 11 20:14:33 2005
                Apache/2.0.49 (Linux/SuSE)
                ========================
              • it works after i put 9443( for ctfs) and 5223( for vbuzzer) after line AllowCONNECT. thanks for you comments. :) -647i(六不一没有); 2005-6-11 (#2341125@0)
    • my friend sent me a new version of vbuzzer, try it -kongkongca(kongkong); 2005-6-14 {39} (#2346429@0)
      ftp://ftp.vbuzzer.com/V-Buzzer-beta.exe
      • does the new version work? -wanttoknow(wantwant); 2005-6-20 (#2356798@0)
    • CONCLUSION: the vbuzzer works anywhere as long as there is an proxy(http, SOCKS4,5). -647i(六不一没有); 2005-6-20 {684} (#2356821@0)
      the http proxy need to support GET and CONNECT menthod. The CONNECT method should support port 5223(which is used for vbuzzer, other than 443 which is well-known https port).

      Currently,I have a proxy with features mentioned above enable, if you are using vbuzzer outside north america, you can use it for your call. To avoid abuse, I have close proxy port 443.

      you can find out my proxy server address from my other posts -- if you really need it.

      AGAIN: the reason why a proxy is needed is the vbuzzer server drop the connection which is from China ( I thought it is IP based, and setup at at TCP and up level). So, a proxy will work, and I have approved it.


      Have fun.
    • 大侠们,我的打开后出现这个,谢谢指教 -fatfox(cici); 2005-6-20 {272} (#2357288@0)
      ---------------------------
      V-Buzzer Warning
      ---------------------------
      The status has been changed to Offline
      because of a network problem, login
      from another application instance or
      by the server.
      ---------------------------
      确定
      ---------------------------
      • i never have that problem. -647i(六不一没有); 2005-6-23 (#2361844@0)
        • I do -fatfox(cici); 2005-6-25 (#2365718@0)

More Topics

  • 老程序员第一次用copilot的一点点体会
  • 现在社区游泳池招救生员巡逻，过一会还要不停的点人头，这工作是否很快就被AI代替了，装一个摄像头后面是AI处理系统，这样只招一个等着救人就行了，人头沉下水一定时间立马强光照射，还可以分析水下人的状况来判断是否溺水等
  • 新冠疫苗引发心肌炎? 最新研究这样看
  • 这道几何题有解吗?
  • SAM 2 Demo
    • 枫下论坛主坛 /  工作学习 /  专业技术讨论