Tracker: Support Requests

5 privoxy in education setting with Lightspeed TTC upstream - ID: 1892034
Last Update: Comment added ( sf-robot )

We've got privoxy 3.0.6 on Mac OS 10.4.11 in a lab and it's been running
well. We had a Symantec proxy upstream so I had the privoxy config forward
everything to the symantec proxy. Again everthing was working well.

We changed from symantec to a transparent proxy - Lightspeed's Total
Traffic Control. I had to put in a rule about allowing popups for the TTC
server which works fine. And most things continue to work fine.

But Appleworks 6 (6.2.9 fully updated) Clipart isn't happy anymore with the
mix of TTC and privoxy.

Applworks has a facility to lookup clipart from a webserver of Apple's. The
query goes to awpicts.apple.com and a cgi script answers and then loads
content from various akamaitech.net servers. If you are just on TTC
everything works. Previously with Privoxy and Symantec everything worked.
Now with privoxy and TTC you get some of the communication but no actual
pictures are downloaded.

Specific steps:

1) Put Mac on transparent TTC proxy (which is to say no proxy entries.)
2) Launch Appleworks and bring up "VIew Clipart" under the File menu.
3) Put in a search tag, like dog and hit return.
4) the dialogue box scrolls through messages contacting awpicts.apple.com,
then getting clippings_search.cgi (which is actually downloaded) and then
various akamaitech.net urls come up.

When the akamaitech.net urls come up each one is supposed to load a jpg
clipart in the view of the gui search field. If you look in the hd a cache
folder under Appleworks User Data starts to fill with folders and files.

If you are on privoxy under TTC you get the folders with zero content.

One of the folders has a file - <clippings_search.cgi>. Viewing the file
it's a list of urls of the form:
<a
href="http://a232.g.akamaitech.net/7/232/51/716b47a804e0d/awpicts.apple.com
/entertainment/drama_and film_t/actor.dog.jpg"><img
src="http://a232.g.akamaitech.net/7/232/51/716b47a804e0d/awpicts.apple.com/
entertainment/drama_and film_t/actor.dog.jpg"></a>
...
There is no difference in the file between the on privoxy or not.

Things I've tried:

loading awpicts.apple.com in the fragile user.action section.
loading .g.akamaitech.net in the fragile user.action section.
putting forward .g.akamaitech.net as a forward as -
forward .g.akamaitech.net .
in the privoxy config system.

I'm not ready to retool and install 3.0.8 at this moment as I have to get
used to the new installation scheme. I don't mind it but I'd prefer to
impliment it later.


Steven ( smkolins ) - 2008-02-12 15:54

5

Closed

None

Fabian Keil

None

None

Public


Comments ( 6 )




Date: 2008-02-29 03:20
Sender: sf-robotSourceForge.net Site Admin


This Tracker item was closed automatically by the system. It was
previously set to a Pending status, and the original submitter
did not respond within 14 days (the time period specified by
the administrator of this Tracker).


Date: 2008-02-14 16:52
Sender: fabiankeilProject Admin


Yes, it looks like TTC is intercepting the request
and tries to redirect the client to another URL.

Given the path of the URL, I assume it contains a
message that explains why TTC decided to block the
request. I guess you have to unblock the URL in TTC.




Date: 2008-02-13 20:13
Sender: smkolins


Hmm - might have to eat my words a bit - following the debug 8 I'm seeing
TTC interfering?

Feb 13 15:03:11 Privoxy(000003a0) Info: loading configuration file
'/Library/Privoxy/config':
above is where I saved the config while with debug 8 enabed.
Feb 13 15:03:11 Privoxy(000000a0) Request:
awpicts.apple.com/cgi-bin/clippings_search.cgi?search_type=partial&max_hits=100&query_string=dog
that's the search in Appleworks starting up and getting a response from
awpicts.apple.com
Feb 13 15:03:11 Privoxy(000003a0) Info: (Re-)Open logfile
/Library/Privoxy/./logfile.log
Feb 13 15:03:11 Privoxy(000003a0) Info: Privoxy version 3.0.6
Feb 13 15:03:11 Privoxy(000003a0) Info: Program name: ./privoxy
Feb 13 15:03:11 Privoxy(000000a0) Header: scan: HTTP/1.1 200 OK
Feb 13 15:03:11 Privoxy(000000a0) Header: scan: Date: Wed, 13 Feb 2008
20:03:11 GMT
Feb 13 15:03:11 Privoxy(000000a0) Header: scan: Server: Apache/1.3.33
(Darwin) PHP/4.4.4
Feb 13 15:03:11 Privoxy(000000a0) Header: scan: Cache-Control:
max-age=600
Feb 13 15:03:11 Privoxy(000000a0) Header: scan: Expires: Wed, 13 Feb 2008
20:13:11 GMT
Feb 13 15:03:11 Privoxy(000000a0) Header: scan: Keep-Alive: timeout=50,
max=488
Feb 13 15:03:11 Privoxy(000000a0) Header: scan: Connection: Keep-Alive
Feb 13 15:03:11 Privoxy(000000a0) Header: scan: Transfer-Encoding:
chunked
Feb 13 15:03:11 Privoxy(000000a0) Header: scan: Content-Type: text/html
Feb 13 15:03:11 Privoxy(000000a0) Header: crumble crunched: Connection:
Keep-Alive!
Feb 13 15:03:11 Privoxy(000000a0) Header: crumble crunched: Keep-Alive:
timeout=50, max=488!
Feb 13 15:03:11 Privoxy(000000a0) Header: Adding: Connection: close
Feb 13 15:03:16 Privoxy(00000058) Header: New HTTP Request-Line: GET
/7/232/51/a3579415dce8c3/awpicts.apple.com/entertainment/drama_and_film_t/actor_dog.jpg
HTTP/1.1
Feb 13 15:03:16 Privoxy(00000058) Header: scan: GET
/7/232/51/a3579415dce8c3/awpicts.apple.com/entertainment/drama_and_film_t/actor_dog.jpg
HTTP/1.1
Feb 13 15:03:16 Privoxy(00000058) Header: scan: Content-Type: text/plain;
charset="us-ascii"
Feb 13 15:03:16 Privoxy(00000058) Header: scan: Accept:
application/postscriptimage/*
Feb 13 15:03:16 Privoxy(00000058) Header: scan: Host:
a232.g.akamaitech.net
Feb 13 15:03:16 Privoxy(00000058) Header: scan: Connection: Keep-Alive
Feb 13 15:03:16 Privoxy(00000058) Header: scan: Accept-Language: en
Feb 13 15:03:16 Privoxy(00000058) Header: crumble crunched: Connection:
Keep-Alive!
Feb 13 15:03:16 Privoxy(00000058) Header: addh-unique: Host:
a232.g.akamaitech.net
Feb 13 15:03:16 Privoxy(00000058) Header: Adding: Connection: close
Feb 13 15:03:16 Privoxy(00000058) Request:
a232.g.akamaitech.net/7/232/51/a3579415dce8c3/awpicts.apple.com/entertainment/drama_and_film_t/actor_dog.jpg
Feb 13 15:03:16 Privoxy(00000058) Header: scan: HTTP/1.0 302 Temporary
Redirect
Feb 13 15:03:16 Privoxy(00000058) Header: scan: Server: Lightspeed Content
Filter (OC-3 Edition)
Feb 13 15:03:16 Privoxy(00000058) Header: scan: Location:
http://10.200.247.232/ContentFiltering/Blocked.aspx?id=6629913322626040523

Do I read the above correct - that Lightspeed filter is cutting off the
jpeg get command??

Feb 13 15:03:16 Privoxy(00000058) Header: scan: Connection: close
Feb 13 15:03:16 Privoxy(00000058) Header: crumble crunched: Connection:
close!
Feb 13 15:03:16 Privoxy(00000058) Header: Adding: Connection: close
Feb 13 15:03:16 Privoxy(000000a0) Header: New HTTP Request-Line: GET
/7/1540/51/a1ba49f28c40fc/awpicts.apple.com/business/cartoons_t/afraid_of_dog.jpg
HTTP/1.1
Feb 13 15:03:16 Privoxy(000000a0) Header: scan: GET
/7/1540/51/a1ba49f28c40fc/awpicts.apple.com/business/cartoons_t/afraid_of_dog.jpg
HTTP/1.1
Feb 13 15:03:16 Privoxy(000000a0) Header: scan: Content-Type: text/plain;
charset="us-ascii"
Feb 13 15:03:16 Privoxy(000000a0) Header: scan: Accept:
application/postscriptimage/*
Feb 13 15:03:16 Privoxy(000000a0) Header: scan: Host:
a1540.g.akamaitech.net

I was going to try the suggested changes but when I saw lightspeed in
there I though - aha, lightspeed is doing it....


Date: 2008-02-12 19:25
Sender: nobody

Logged In: NO

err, DO NOT add that last brace at the end.


Date: 2008-02-12 19:23
Sender: nobody

Logged In: NO

try adding this to the end of your "user.action" file:

{ \
-add-header \
-block \
-crunch-incoming-cookies \
-crunch-outgoing-cookies \
-deanimate-gifs \
-downgrade-http-version \
-fast-redirects \
-filter \
-handle-as-image \
-hide-forwarded-for-headers \
-hide-from-header \
-hide-referrer \
-hide-user-agent \
-kill-popups \
-prevent-compression \
-send-vanilla-wafer \
-send-wafer \
-session-cookies-only \
-set-image-blocker \
}
.apple.com
.akamai.net/.*/store.apple.com/.*
.akamai.net/.*/www.apple.com/.*
.akamai.net/.*/www.mac.com/.*
ax.phobos.apple.com.edgesuite.net
.mac.com
}




Date: 2008-02-12 17:02
Sender: fabiankeilProject Admin


What does the request that leads to the zero-content
folder look like in Privoxy's log with debug 8 enabled?
How does the successful one without TTC look like?


Log in to comment.




Attached File

No Files Currently Attached

Changes ( 9 )

Field Old Value Date By
status_id Pending 2008-02-29 03:20 sf-robot
close_date 2008-02-14 16:52 2008-02-29 03:20 sf-robot
status_id Open 2008-02-14 16:52 fabiankeil
assigned_to nobody 2008-02-14 16:52 fabiankeil
close_date - 2008-02-14 16:52 fabiankeil
status_id Pending 2008-02-13 20:13 smkolins
close_date 2008-02-12 17:02 2008-02-13 20:13 smkolins
close_date - 2008-02-12 17:02 fabiankeil
status_id Open 2008-02-12 17:02 fabiankeil