Proxy tunnelling blues

[andyf]

Greets.

My attempts to use (http/hyper)tunnel under XP to remote desktop back home are not going well.

It works on a non-proxy basis, but when I attempt to go through the proxy here, it eventually times out.

What -seems- to be happening from the debug log, is that the proxy really isn't flexible enough to let the tunnel work properly?

It seems as if the ISA proxy sends out an http request for a page, doesn't get anything back, shrugs its shoulders and my tunnel fails miserably. Is the proxy unworkable for this purpose? MSN Messenger can happily use the proxy under "guess my settings", or if I define it explicity as an HTTP Proxy, yet other instant messenger apps always bomb out with the 504 error as seen below.

Anything else I can try? No, I don't have access to the proxy server, and No, I can't use a different one either :)

Choice chunks of log output follows


20041022 085521 htc (httptunnel) 3.0 started with arguments:
20041022 085521 me = htc
20041022 085521 device = (null)
20041022 085521 host_name = 82.x.x.x
20041022 085521 host_port = 23001
20041022 085521 proxy_name = 10.x.x.x
20041022 085521 proxy_port = 8080
20041022 085521 proxy_buffer_size = 0
20041022 085521 proxy_buffer_timeout = -1
20041022 085521 content_length = 102400
20041022 085521 forward_port = 9009
20041022 085521 max_connection_age = 300
20041022 085521 strict_content_length = 0
20041022 085521 keep_alive = 5
20041022 085521 proxy_authorization = (null)
20041022 085521 user_agent = (null)
20041022 085521 debug_level = 9
20041022 085521 server_socket (9009) = 3
20041022 085521 waiting for connection on port 9009
20041022 085527 wait_for_connection_on_socket (3) = 4
20041022 085527 creating a new tunnel
20041022 085527 tunnel_new_client ("82.x.x.x", 23001, "10.x.x.x", 8080, 102400)
20041022 085527 tunnel_connect()
20041022 085527 tunnel_out_setsockopts: non-fatal SO_SNDLOWAT error: This option is unsupported
20041022 085527 tunnel_out_setsockopts: non-fatal SO_SNDLOWAT: 0
20041022 085527 tunnel_out_setsockopts: SO_LINGER: onoff=1 linger=2000
20041022 085527 tunnel_out_setsockopts: non-fatal TCP_NODELAY: 1
20041022 085527 tunnel_out_setsockopts: SO_KEEPALIVE: 1
20041022 085527 write (5, 0x241f5a0, 52) ...
20041022 085527 ... = 52
20041022 085527 http_write_request: POST http://82.x.x.x:23001/index.html HTTP/1.1

20041022 085527 write (5, 0x408b67, 2) ...
20041022 085527 ... = 2
20041022 085527 tunnel_out_connect: output connected
20041022 085527 write (5, 0x241fe3f, 1) ...
20041022 085527 ... = 1
20041022 085527 tunnel_write_request: TUNNEL_OPEN (1)
20041022 085527 tunnel_write_data: out_total_raw = 4
20041022 085527 tunnel_in_connect()
20041022 085527 tunnel_in_setsockopts: non-fatal SO_RCVLOWAT error: This option is unsupported
20041022 085527 tunnel_out_setsockopts: SO_RCVLOWAT: 0
20041022 085527 write (6, 0x241f5e4, 51) ...
20041022 085527 ... = 51
20041022 085527 http_write_request: GET http://82.x.x.x:23001/index.html HTTP/1.1

20041022 085527 write (6, 0xa041408, 4) ...
20041022 085527 ... = 4

20041022 085550 http_parse_response: major version = 1
20041022 085550 read (6, 0xa0413c8, 1) ...
20041022 085550 http_parse_response: minor version = 1
20041022 085550 read (6, 0xa0413c8, 1) ...
20041022 085550 http_parse_response: status code = 504
20041022 085550 read (6, 0xa0413c8, 1) ...
20041022 085551 http_parse_response: status message = "Proxy Timeout ( Connection timed out. For more information about this event, see ISA Server Help. )"

20041022 085551 tunnel_in_connect: HTTP error 504
20041022 085551 http_error_to_errno: HTTP error -504
20041022 085551 couldn't open tunnel: I/O error
20041022 085551 exit with status = 1

[KingDaveRa]

Proxy tunnels are probably disabled.

That and the fact ISA blows ;)

[Njoroge]

Use htc version 3.3, not version 3.

[starquake]

Best trick is to use https tunnelling. Companies running proxies can't look into https traffic, so its great for tunnelling anything you like - http normally has restrictions on various parts...

[maxrealism]

If it's file transfer you're after (which by the sounds of things you aren't) WebDAV is pretty good.

You still use port 80, but you can access webdav connections through http and transfer files about the place.

More info about WebDAV Standard here (http://www.webdav.org/)

[Jester]

You wont get out through ISA server on http ports or http proxy ports, it all goes through the cache and hence only http responses will work. Same goes for https in fact.

I suggest you try another port, maybe 21.

[andyf]

nj: hmm can't seem to find any precompiled NT binaries for 3.3

max: err.. ok ..

jester: I only have port 8080 on the proxy to play with :(

[Njoroge]

Remind me on Monday andy, I'll email them to you.

I had probs with 3.0 but 3.3 seemed to fix them