Re: Problem access webmin with ssl through dial-up

[Joe C. <jo...@sw...>]

Well there is your culprit.  Ask the techs there what port you /can/ use
the CONNECT method on.  As I mentioned, this will likely always be
allowed on port 443 and sometimes on 563.  Or maybe you can convince
them to let you use port 10000 for it (in Squid, they can simply add it
to their SSL_ports acl and run squid -k reconfigure--if they use some
other proprietary proxy they'll need to consult their documentation or
vendor for how to do this).

Good luck finding a solution.

Tan Lian Leong wrote:
> My ISP's default proxy setting, i.e. proxy.mystarhub.com.sg
> Thanks.
> 
> ----- Original Message -----
> From: "Joe Cooper" <jo...@sw...>
> To: "Tan Lian Leong" <ll...@we...>
> Cc: <web...@li...>
> Sent: Saturday, April 13, 2002 4:10 PM
> Subject: Re: Problem access webmin with ssl through dial-up
> 
> 
> 
>>No.  I mean it looks like you're hitting a firewall somewhere between
>>you and the Webmin server.  Neither Webmin nor your Red Hat iptables
>>firewall is going to provide an error message that says tunnelling is
>>not permitted on this port.  Something had to produce that error, and
>>I'm guessing it was a proxy/firewall between your dialup client, and the
>>Webmin server...though for it to talk about tunnelling, you would have
>>to have the browser configured to go through the proxy most likely.
>>What do you have in your proxy settings in your browsers on the dialup
> 
> link?
> 
>>Tan Lian Leong wrote:
>>
>>>I rebuild a new Redhat7.2 without install firewall to test SSL Webmin
>>
> and
> 
>>>still can't access via dialup.
>>>I still remember when i had a Redhat6.2 and SSL Webmin v0.8x last year,
>>
> i
> 
>>>could access it via dialup.
>>>Thanks for reply.
>>>
>>>Tommy
>>>
>>>----- Original Message -----
>>>From: "Joe Cooper" <jo...@sw...>
>>>To: "Tan Lian Leong" <ll...@we...>
>>>Cc: <web...@li...>
>>>Sent: Saturday, April 13, 2002 1:36 PM
>>>Subject: Re: Problem access webmin with ssl through dial-up
>>>
>>>
>>>
>>>
>>>>Oh...Looks like you've got some sort of proxying firewall or something.
>>>>I can't even guess at this.  It's a strange message.  But the problem
>>>>isn't with Webmin.
>>>>
>>>>You'll need to speak with the administrator of the proxy to allow
>>>>connections to port 10000, or put your Webmin onto a port that is
>>>>allowed (port 443 is usually allowed for CONNECT tunnelling requests..as
>>>>is 563).
>>>>
>>>>Tan Lian Leong wrote:
>>>>
>>>>
>>>>>Thanks for reply. I can access SSL Webmin via local box or LAN
>>>>
>>>successfully.
>>>
>>>
>>>>>
>>>>>This is the error message from Netscape browser via dialup:
>>>>>
>>>>>
>>>>> Server Error
>>>>>
>>>>>
>>>>>       The following error occurred:
>>>>>
>>>>>       This tunnel port is invalid. The administrator is not allowing
>>>>>       tunneling on this port.
>>>>>
>>>>>
>>>>>
>>>>>This is the error message from Internet Explorer browser via dialup:
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> The page cannot be displayed
>>>>>
>>>>>
>>>>> There is a problem with the page you are trying to reach and it
>>>>
> cannot
> 
>>>>> be displayed.
>>>>>
>>>>>
>>>>>   HTTP 500 - Internal server error
>>>>>   Internet Explorer
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>>Hmm... I doubt it is a Net::SSLeay issue.  You wouldn't be able to
>>>>>
>>>login
>>>
>>>
>>>>>>from a local box.
>>>>>
>>>>>
>>>>>>To repeat my other question for you:  What happens when you try to
>>>>>>connect over the dialup?  Is there an error message, a timeout,
>>>>>>something else?
>>>>>
>>>>>>>Tan Lian Leong wrote:
>>>>>>>I confirmed that Webmin and Usermin work locaaly when connecting
>>>>>>
> via
> 
>>>>>https
>>>>>
>>>>>>>nad http connection. For dialup, i only can connect via http but
>>>>>>
>>>>>that is not
>>>>>
>>>>>>>secure. Could it be Net::SSLeay issue? I installed Net::SSLeay
>>>>>>
>>>>>v1.12. Thank
>>>>>
>>>>>>>you for fast reply.
>>>>>>>
>>>>>>>Tommy
>>>>>>
>>>>
>>>>
>>>>--
>>>>Joe Cooper <jo...@sw...>
>>>>http://www.swelltech.com
>>>>Web Caching Appliances and Support
>>>>
>>>
>>>
>>>
>>>
>>>
>>
>>
>>--
>>Joe Cooper <jo...@sw...>
>>http://www.swelltech.com
>>Web Caching Appliances and Support
> 
> 
> 
> 
> 



-- 
Joe Cooper <jo...@sw...>
http://www.swelltech.com
Web Caching Appliances and Support