×

Loading...
Ad by
  • 推荐 OXIO 加拿大高速网络，最低月费仅$40. 使用推荐码 RCR37MB 可获得一个月的免费服务
Ad by
  • 推荐 OXIO 加拿大高速网络，最低月费仅$40. 使用推荐码 RCR37MB 可获得一个月的免费服务

@Florida

ok. found it, in this version the content of the loadmodule will be automatic copied from a another file in systemconfig folder. But, when the https always get 403!!

647i(六不一没有)
本文发表在 rolia.net 枫下论坛here is the config file:
==========================
AllowCONNECT 443

ProxyRequests On
ProxyVia On

<proxy *>
Order Deny,Allow
#Deny from all
Allow from 192.168.2.*
Allow from 222.170.3.70
Allow from all
</proxy>
==========================

is there any other thing I need for https CONNECT method to go through?


here is apache log:
==================
192.168.2.147 - - [11/Jun/2005:20:02:50 -0400] "GET http://rolia.net/forum/forum_reply.php?tno=285730&parent=2340943&_cno=1350& HTTP/1.1" 200 4945 "http://rolia.net/forum/forum_list.php?_cno=1350" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Opera 7.23 [en]"
192.168.2.147 - - [11/Jun/2005:20:03:38 -0400] "GET http://miranda-icq.sourceforge.net/getip.php HTTP/1.0" 200 69 "-" "Miranda/1.0.1.6"
192.168.2.147 - - [11/Jun/2005:20:05:43 -0400] "CONNECT vbuzzer.com:5223 HTTP/1.0" 403 1033 "-" "-"
192.168.2.147 - - [11/Jun/2005:20:07:08 -0400] "CONNECT www.ctfs.com:9443 HTTP/1.1" 403 1034 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Opera 7.23 [en]"

cd:/etc/apache2 #

==============
from the log above, we can see the GET method for http is OK. but the CONNECT method for https doesn't work, both to vbuzzer.com and ctfs.com.

Any idea?更多精彩文章及讨论，请光临枫下论坛 rolia.net
(#2340973@0)
Last Updated: 2005-6-11
This post has been archived. It cannot be replied.
Report

Replies, comments and Discussions:

  • 工作学习 / 专业技术讨论 / vbuzzer doesn't work in China. apache gurus' help is needed. -647i(六不一没有); 2005-6-11 {2786} (#2340862@0)
    本文发表在 rolia.net 枫下论坛just did a test with friend in China, who is vbuzzer user.

    vbuzzer doesn't work. aftrer use ping and tracert in china, I found that the vbuzzer client is able to estiblish tcp connection to server but is disconnect by server right away after it found out the connect is from China.

    the conclusion is vbuzzer block the ip from the server side but not the ip level. (both client in china and toronto are able to estiblish tcp connect with the vbuzzer server: by ping and telnet vbuzzer.com:5223)

    The solution is let vbuzzer server recognize the china vbuzzer client as it is in toronto: use apache2 proxy

    the china client is use my apache2 server as proxy:
    69.199.166.147:80

    the following is my conf of apache2:
    ===============httpd.conf========
    ProxyRequests On
    ProxyVia On

    <proxy *>
    Order Deny,Allow
    Deny from all
    Allow from 192.168.2.*
    Allow from 222.170.3.70
    Allow from all
    </proxy>
    ======================

    =================loadmodule.conf============
    LoadModule proxy_module /usr/lib/apache2-prefork/mod_proxy.so
    LoadModule proxy_ftp_module /usr/lib/apache2-prefork/mod_proxy_ftp.so
    LoadModule proxy_http_module /usr/lib/apache2-prefork/mod_proxy_http.so
    LoadModule ssl_module /usr/lib/apache2-prefork/mod_ssl.so

    =====================

    the log of the web server are
    ==============
    221.221.144.171 - - [11/Jun/2005:17:20:59 -0400] "GET / HTTP/1.1" 200 1018 "-" "Mozilla/4.0 (compatible; MSIE 6.0;
    Windows NT 5.0)"
    221.221.144.171 - - [11/Jun/2005:17:21:00 -0400] "GET /apache_pb.gif HTTP/1.1" 200 2326 "http://69.199.166.147/" "
    Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
    221.221.144.171 - - [11/Jun/2005:17:22:26 -0400] "GET http://miranda-icq.sourceforge.net/getip.php HTTP/1.0" 200 6
    9 "-" "Miranda/1.0.1.6"
    221.221.144.171 - - [11/Jun/2005:17:22:31 -0400] "CONNECT vbuzzer.com:5223 HTTP/1.0" 403 1033 "-" "-"
    221.221.144.171 - - [11/Jun/2005:17:32:27 -0400] "GET http://miranda-icq.sourceforge.net/getip.php HTTP/1.0" 200 6
    9 "-" "Miranda/1.0.1.6"
    221.221.144.171 - - [11/Jun/2005:17:42:29 -0400] "GET http://miranda-icq.sourceforge.net/getip.php HTTP/1.0" 200 6
    9 "-" "Miranda/1.0.1.6"
    221.221.144.171 - - [11/Jun/2005:17:52:30 -0400] "GET http://miranda-icq.sourceforge.net/getip.php HTTP/1.0" 200 6
    9 "-" "Miranda/1.0.1.6"
    221.221.144.171 - - [11/Jun/2005:18:02:31 -0400] "GET http://miranda-icq.sourceforge.net/getip.php HTTP/1.0" 200 6
    9 "-" "Miranda/1.0.1.6"
    =================NOTE: the 221.221.144.171 are the ip address in china=============

    QUESTION:
    what should I do to allow the "CONNECT" command to go through my web server as proxy to connect to vbuzzer.com?

    Thanks更多精彩文章及讨论，请光临枫下论坛 rolia.net
    • the apache server i am using is apache 2.0.49 on Suse 9.x 2.6.4-52 Thanks for your help, if we can solve the problem, the free v-buzzer can be used in china :) -647i(六不一没有); 2005-6-11 (#2340870@0)
    • shoot, didn't know what is vbuzzer , so I did a google, then all a sudden I heard some buzz, thought there was a fly behind my computer :-( -holdon(again); 2005-6-11 {200} (#2340923@0)
      Why don't you install a socks 5 proxy ? That will for sure work. about apache, I didn't try it, but looks like you need another module:

      http://httpd.apache.org/docs-2.0/mod/mod_proxy_connect.html
      • 1. the free version of v-buzzer is an ip phone (software version) with a toronto phone number. 2. I have added line "mod_proxy_connect " to loadmodule file, but -647i(六不一没有); 2005-6-11 {89} (#2340930@0)
        each time when I restart the apache, the line is removed automaticly. :(

        feel confuse.
        • you mean apache will automatically modify the conf file? that's quite unbelieveble. -holdon(again); 2005-6-11 (#2340943@0)
          • ok. found it, in this version the content of the loadmodule will be automatic copied from a another file in systemconfig folder. But, when the https always get 403!! -647i(六不一没有); 2005-6-11 {1273} (#2340973@0)
            本文发表在 rolia.net 枫下论坛here is the config file:
            ==========================
            AllowCONNECT 443

            ProxyRequests On
            ProxyVia On

            <proxy *>
            Order Deny,Allow
            #Deny from all
            Allow from 192.168.2.*
            Allow from 222.170.3.70
            Allow from all
            </proxy>
            ==========================

            is there any other thing I need for https CONNECT method to go through?


            here is apache log:
            ==================
            192.168.2.147 - - [11/Jun/2005:20:02:50 -0400] "GET http://rolia.net/forum/forum_reply.php?tno=285730&parent=2340943&_cno=1350& HTTP/1.1" 200 4945 "http://rolia.net/forum/forum_list.php?_cno=1350" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Opera 7.23 [en]"
            192.168.2.147 - - [11/Jun/2005:20:03:38 -0400] "GET http://miranda-icq.sourceforge.net/getip.php HTTP/1.0" 200 69 "-" "Miranda/1.0.1.6"
            192.168.2.147 - - [11/Jun/2005:20:05:43 -0400] "CONNECT vbuzzer.com:5223 HTTP/1.0" 403 1033 "-" "-"
            192.168.2.147 - - [11/Jun/2005:20:07:08 -0400] "CONNECT www.ctfs.com:9443 HTTP/1.1" 403 1034 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Opera 7.23 [en]"

            cd:/etc/apache2 #

            ==============
            from the log above, we can see the GET method for http is OK. but the CONNECT method for https doesn't work, both to vbuzzer.com and ctfs.com.

            Any idea?更多精彩文章及讨论，请光临枫下论坛 rolia.net
            • if you only AllowCONNECT 443, that means only 443 port accept connect mothed, right? try allowCONNECT 443 80 -holdon(again); 2005-6-11 (#2340979@0)
              • done. still doen's work. -647i(六不一没有); 2005-6-11 {461} (#2340990@0)
                here is the output:
                ========================
                https://www.ctfs.com:9443/au/csswu/RequestHandler?ActionID=GatewayCSS
                ========================

                Access forbidden!

                You don't have permission to access the requested object. It is either read-protected or not readable by the server.

                If you think this is a server error, please contact the webmaster.
                Error 403
                www.ctfs.com
                Sat Jun 11 20:14:33 2005
                Apache/2.0.49 (Linux/SuSE)
                ========================
              • it works after i put 9443( for ctfs) and 5223( for vbuzzer) after line AllowCONNECT. thanks for you comments. :) -647i(六不一没有); 2005-6-11 (#2341125@0)
    • my friend sent me a new version of vbuzzer, try it -kongkongca(kongkong); 2005-6-14 {39} (#2346429@0)
      ftp://ftp.vbuzzer.com/V-Buzzer-beta.exe
      • does the new version work? -wanttoknow(wantwant); 2005-6-20 (#2356798@0)
    • CONCLUSION: the vbuzzer works anywhere as long as there is an proxy(http, SOCKS4,5). -647i(六不一没有); 2005-6-20 {684} (#2356821@0)
      the http proxy need to support GET and CONNECT menthod. The CONNECT method should support port 5223(which is used for vbuzzer, other than 443 which is well-known https port).

      Currently,I have a proxy with features mentioned above enable, if you are using vbuzzer outside north america, you can use it for your call. To avoid abuse, I have close proxy port 443.

      you can find out my proxy server address from my other posts -- if you really need it.

      AGAIN: the reason why a proxy is needed is the vbuzzer server drop the connection which is from China ( I thought it is IP based, and setup at at TCP and up level). So, a proxy will work, and I have approved it.


      Have fun.
    • 大侠们,我的打开后出现这个,谢谢指教 -fatfox(cici); 2005-6-20 {272} (#2357288@0)
      ---------------------------
      V-Buzzer Warning
      ---------------------------
      The status has been changed to Offline
      because of a network problem, login
      from another application instance or
      by the server.
      ---------------------------
      确定
      ---------------------------
      • i never have that problem. -647i(六不一没有); 2005-6-23 (#2361844@0)
        • I do -fatfox(cici); 2005-6-25 (#2365718@0)

More Topics

  • 脑洞大开，突发奇想，用力来传播信息
  • 看大家讨论日语，俺也正在认真学习。其实语言问题应该是很快也很容易就解决的，可能比自动驾驶来的还快。TREK里面，全宇宙的人都在大脑里安装了UNIVERSAL TRANSLATOR，外星人之间相互交流无障碍。废话少说，看视频。。。加上个MIC和耳机，不同国家的人就可以无障碍交流。
  • 肉脸真有搞 IT 的？Linux 把俄国中国伊朗踢出去了好像肉脸 IT 没啥感觉似的
  • 请问web developer和software developer技术上有什么区别？
  • Elon Musk 带着川普总统奔向火星了。
    • 枫下论坛主坛 /  工作学习 /  专业技术讨论