Problems with proxies

[TheApe]

OK guys (gals). Need a hand......

I've started my new job now (hence the disapearing act recently)... the problem is I'm having problems getting either RC5 / Seti through my companies proxy.... MS Proxy 2.

Any ideas anyone, tried using the port 80 on rc5, but fails... tried the rc5 proxy client as well.... tried seti driver for seti.... no go.... gonna try a couple of the other proxies....

Anyone got any ideas to try?

 

[Wolfie]

TheApe

You have the same problem as I am having. I can NOT get threw the Proxy at my work. It kinda makes me mad that it blocks things going out. But I can understand anything coming in. Maybe we need to know how we are tring to connect. What ports. What do we need to setup to get out???
Maybe we can get some of the proxy boys to fill us in on some info here.

Wolfie

 

[Poof]

TheApe - I had the same problem when trying to test one of my pproxies through the firewall (not M$) using port 80. Just configuring the client to flush through port 80 wasn't enough (got "handshake" errors).

I found that I had to add a line to dnet.ini for it work, ie.:

[network]
..
..
firewall-type=http

You may have already done this but just trying to cover all bases that I could think of...

 

[JonB]

The last "http" suggestion is good, plus use the TCP/IP address for your desired keyserver. Many times it is a DNS blockage.

proxy.teamanandtech.com = 24.177.191.77

 

[TwoFace]

I'm not completely sure how to circumvent that "bad" proxy/firewall problems, but don't use just one IP for proxy.teamanandtech.com. The one JonB quoted is just one of many IP's that proxy.teamanandtech.com points to as that addy is a roundrobin of pproxies. If you want to use ip (which might be a good idea since DNS might be the problem as JonB said) find your favourite pproxy operator (I would suggest Jay) and use that specific ip so you know where to look for your stats

BTW. Jay has REALTIME stats ... beat that if you can

Good luck

With love and respect your fellow TA member

Two-Face
My stats:
RC5
OGR-25
Seti
Gamma Flux

 

[crYnOid]

Jay's proxy would be good if it had port 80 open(which it doesn't appear to Two-Face ), so you may have to choose another one

 

[TwoFace]

Doh of course I should check the page I link to first right?!?

Thanks for correcting me crYn0id

With love and respect your fellow TA member

Two-Face
My stats:
RC5
OGR-25
Seti
Gamma Flux

 

[Jator]

TF, thanks for the compliment, but I use a dynamic IP, so anyone needing Static IPs, please look to Bphantoms proxy. I have setup my server to dynamically update the host names I use (jator.2y.net, www.jator.net, www.mdorlando.com), so the downtime on my server should be negligible from now on unless there is a major power outage.

Jay

 

[Jator]

Oh, and I might be opening up port 80 in the future.

 

[ottawanker]

If you are still having proxy problems, as a last resort, setup a proxy at work, and then every day or 2 take a floppy in and copy the files over..


Oh, and Two-Face, you said: BTW. Jay has REALTIME stats ... beat that if you can

pproxy.beerpalace.org has realtime OGR stats.. none of this RC5 crap..

 

[Jator]

otta, I have realtime OGR stats as well.
OGR Real Time Stats

 

[ottawanker]

gosh darnit. well, i have the word 'beer' in my domain name AND realtime OGR stats!

bahahahah

 

[Jator]

otta, you got me on the beer bit.

 

[TheApe]

OK, I got my SETI running by using SetiQueue.... nice... Here's my perproxy ini..... have a look.... basically I HAVE TO go through port 80.....


[KeyServer]
ipaddress=proxy80.teamanandtech.com
port=80
connectperiod=600
connectivity=normal ; normal,offline,lurk,lurkonly
;bindip= ; IP to talk out to keyserver from
uuehttpmode=2
; 0=normal,1=uue,2=http,3=http+uue
; 4=socks4,5=socks5,6=genproxy,7=genproxy+uue
httpproxy=147.89.81.109
httpport=80
httpid=Y2hhcmxhczpzZXNhbXkwMA==

[ports]
;listenaddress= ; IP to accept clients on
;port=2064
;port2=23 ; must be root for ports < 1000
port3=80
testport=3064
timeout=30

[console]
logfileconsole=
logfileconsolerotation=daily
consoleverbosity=&quot;general stats keyblock server client buffers timestamp attention errlow errsevere&quot;
timestampflags=130 ; 130=new UTC 4-digit year format

[rc564]
logfilekeyblock=pproxyrc5
logfilekeyblockrotation=daily
minkeysready=10
maxkeysready=20
maxkeysdone=3

[desII]
logfilekeyblock=pproxydes
logfilekeyblockrotation=daily
minkeysready=10
maxkeysready=20
maxkeysdone=3

[ogr]
logfilekeyblock=pproxyogr
logfilekeyblockrotation=daily
minkeysready=10
maxkeysready=20
maxkeysdone=3

[csc]
logfilekeyblock=pproxycsc
logfilekeyblockrotation=daily
minkeysready=10
maxkeysready=20
maxkeysdone=3

[misc]
proxymessage=&quot;rc5des Personal Proxy!&quot;
pidfile=rc5desproxy.pid
statusperiod=30
periodicperiod=120
;logfilecompressor=logcompressor.sh

[ignoredip]

[allowedip]

Anyone have any sugestions, If I can get the perproxy working I can get a fair few PC's dumping to it!

 

[RaySun2Be]

One thing I can see,

[ports]
listenaddress=xxx.xxx.xxx.xxx <---------put the ip addy of the PC running the perproxy here ; IP to accept clients on
port=80 <-----------sets the port for the internal traffic
;port2=23 ; must be root for ports < 1000
port3=80
testport=3064
timeout=30

 

[Jator]

Ray,

I disagree on the portlisten otion. If the ip of his machine changed for any reason, the proxy wouldn't accept any blocks.

Jay

 

[Russ]

Jator,

Since the clients ini files specify the IP address of the pproxy, they'd be cracking randoms anyway if the IP changed.

Russ, NCNE

 

[RaySun2Be]

Oops,
I forgot I'm using a static IP address that never changes.

Leave it as you have it if you don't have a static IP addy. I'm used to specifying the IP addy, as we don't use DNS internally, and I setup the IP address to be static for the proxy server.

Jay, what do you specify as the keyserver in the RC5 client?

 

[Jator]

Ray,

I specify jator.2y.net. That way even though I have a dynamic IP, I can use a host name to default to (jator.2y.net is updated when my IP changes and is usually up within 5 minutes).

Russ,

Yes, I knew about the randoms being cracked. I was refering to Ray's suggestion on putting in an IP address on the proxy to accept clients from. If the IP changed on the proxy, it wouldn't accept connections.

Jay

 

[Russ]

Jator,

Maybe I didn't make that clear enough. If the IP address changed on the pproxy server, the clients wouldn't be able to connect anyway because the address is specified in their ini files.

Russ, NCNE

 

[Jator]

Russ,

Sorry, I forgot the initial discussion was about the client side. We got to talking about pproxies, thus I was focusing on the proxy portion of the connection.

Jay

 

[Clueless]

Unless your pproxy machine has 2 or more IPs, don't bother setting listenaddress. Here's the blurb from the Readme.txt:

[ports]/listenaddress: The IP address of the machine this personal proxy
is running on. This is optional and only needed if the machine has
multiple IP addresses. If you use one ip address for local connections,
and you have a dialup account that you use to fetch and flush blocks,
you do *not* need to set this.

Regarding whether a dnet client (dnetc or pproxy) must use the IP address instead of host name of the upstream keyserver, I thought the following setting might be relevant:

[ports]/advertisedaddres: This value is normally not needed and is only
needed if you are having problems serving HTTP clients and your personal
proxy machine has a different address by which it is reached on than
what it listens on. (This is usually the case when you are attempting to
serve clients with a machine behind a NAT firewall, or a port-redirected
environment.) This value should be the public IP address that is usuable
by clients to connect back to your personal proxy with. If you do not
specify this value, the value you specified for the listenaddress is
used, otherwise no address is used.

A while back while I was helping HeavyIron with his setup, I noticed that his initial handshake was to my public IP but all subsequent packets was addressed to my private LAN IP which of course got nowhere. At the time, I did not know about this setting and HeavyIron wound up dumping MS proxy and went with a NAT firewall himself. Ever since I found out about this setting, I've always wanted someone to try it out but no one volunteered to be a guinea pig. RaySun2Be was supposed to help me out in this thread but he never did. Perhaps he got upset cuz I called him senile?

 

[Poof]

Ever since I found out about this setting, I've always wanted someone to try it out but no one volunteered to be a guinea pig.

That's how I do mine. I tested a pproxy setup on port 80 behind my NAT firewall. The pproxy has one of the reserved 192.168.*.* addresses and the firewall has my real IP. I put my real IP in for that &quot;advertisedaddress&quot; setting, port-forwarded requests to port 80 on my firewall, to port 80 on the internal machine... and I was able to fetch/flush blocks.

 

[Wolfie]

I need some help boys.


[misc]
project-priority=RC5,DES=0,OGR=0,CSC=0

[rc5]
fetch-workunit-threshold=500
fetch-time-threshold=24

[networking]
autofindkeyserver=no
keyserver=24.177.191.77
port=80
dialup-watcher=disabled
nettimeout=10
firewall-type=http

UUNet Proxy here at work and it seems to be the tightest hole to get out of.
Any more ideas???
Maybe there is a INI I can copy. But of course I will have to change the id.
Thanks
Wolfie

[edit]BTW I got about 600 randoms right now. So The sooner I can get this taken care of the better....
Otherwise I will have to get sneeker going. But if at all possable. It would be better.[/edit]

 

[TheApe]

Hmmm tried all the things mentioned, still no go, the way I got SetiQueue to go is to give it the proxy authorisation name/pass, I asume I have that correct in the ini for perproxy?

httpid=charlas:Y2hhcmxhczpzZXNhbXkwMA==

Where charlas is the username and Y2..... is the encrypted password (copied from the client ini as recomended in the readme)... still no go, the perproxy cant get to the inet....?

Anybody else using the POS that is MS Proxy2?

Comon there HAS TO BE a way round this besides sneakernetting it!

Oh just for completeness this is the client settings I tried!

[parameters]
id=rc5@ashleigh-paul.demon.co.uk

[processor-usage]
priority=4

[misc]
project-priority=RC5,DES=0,OGR=0,CSC=0

[rc5]
fetch-time-threshold=36

[networking]
firewall-type=http
firewall-host=147.89.81.109:80
firewall-auth=Y2hhcmxhczpzZXNhbXkwMA==
keyserver=127.0.0.1:80

Ta All.....

UPDATE - I've had a thought, I may be able to use a personal HTTP proxy that allows you to authenticate against a proxy server (if you know what I mean), i.e perproxy -> PersonalHTTPProxy(with username/password configured) -> Company Proxy -> Team Proxy.....

Anyone know any good proxies, the problem is it has to support HTTP Style Proxy, with USERNAME/PASSWORD support (kinda like SetiQueue does)... Anyone got any bright ideas?