Guest User!

You are not Sophos Staff.

[8.172][NOTABUG][CLOSED] application/x-fcs + proxy compatibility...

Hi,

we have several problems to view adobe link tv like this:

Learn Premiere Pro CS5 & CS5.5 - Getting Started (GS): What is Adobe Premiere Pro CS5? | Adobe TV

Pratically every browser stays stuck showing nothing (flashing dots)... in very rare case it works but I don't know why.

Analyzing the traffic of the proxy I can see that nothing is blocked, but the following incremental logs:


2011:07:12-15:12:51 ASG-BETA httpproxy[16213]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="172.16.24.14" dstip="80.239.230.204" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="266991" request="0xe277ebd8" url="80.239.230.204/.../x-fcs"
2011:07:12-15:12:51 ASG-BETA httpproxy[16213]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="172.16.24.14" dstip="80.239.230.204" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="271481" request="0xe2730820" url="80.239.230.204/.../x-fcs"
2011:07:12-15:12:52 ASG-BETA httpproxy[16213]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="172.16.24.14" dstip="80.239.230.204" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="270026" request="0xe277ebd8" url="80.239.230.204/.../x-fcs"
2011:07:12-15:12:54 ASG-BETA httpproxy[16213]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="172.16.24.14" dstip="80.239.230.204" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="270164" request="0xe2730820" url="80.239.230.204/.../x-fcs"


These URL constantly increase:

80.239.230.204/.../14
80.239.230.204/.../15
80.239.230.204/.../16
80.239.230.204/.../17


and so on...

This behavior is the same also in v8.1

Could be a wrong proxy configuration or a problem with the adobe plugin and RTMTP protocol over proxy?
Any other experience?
Parents
  • Do you see related entries in the packetfilter log file?
  • It seems it tries to establish the connection also witout the proxy:


    2011:07:13-14:03:48 ASG-BETA ulogd[5735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="0:8:74:e2[:D]8[:D]6" dstmac="0:4:23:9a:8a:f5" srcip="172.16.24.14" dstip="2.20.180.150" proto="6" length="48" tos="0x00" prec="0x00" ttl="127" srcport="1151" dstport="1935" tcpflags="SYN"
    2011:07:13-14:03:48 ASG-BETA ulogd[5735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="0:8:74:e2[:D]8[:D]6" dstmac="0:4:23:9a:8a:f5" srcip="172.16.24.14" dstip="2.20.180.150" proto="6" length="48" tos="0x00" prec="0x00" ttl="127" srcport="1152" dstport="443" tcpflags="SYN"
    2011:07:13-14:03:48 ASG-BETA ulogd[5735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="0:8:74:e2[:D]8[:D]6" dstmac="0:4:23:9a:8a:f5" srcip="172.16.24.14" dstip="2.20.180.150" proto="6" length="48" tos="0x00" prec="0x00" ttl="127" srcport="1153" dstport="80" tcpflags="SYN"
    2011:07:13-14:04:05 ASG-BETA ulogd[5735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="0:8:74:e2[:D]8[:D]6" dstmac="0:4:23:9a:8a:f5" srcip="172.16.24.14" dstip="2.20.180.150" proto="6" length="48" tos="0x00" prec="0x00" ttl="127" srcport="1163" dstport="1935" tcpflags="SYN"
    2011:07:13-14:04:05 ASG-BETA ulogd[5735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="0:8:74:e2[:D]8[:D]6" dstmac="0:4:23:9a:8a:f5" srcip="172.16.24.14" dstip="2.20.180.150" proto="6" length="48" tos="0x00" prec="0x00" ttl="127" srcport="1164" dstport="443" tcpflags="SYN"
    2011:07:13-14:04:06 ASG-BETA ulogd[5735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="0:8:74:e2[:D]8[:D]6" dstmac="0:4:23:9a:8a:f5" srcip="172.16.24.14" dstip="2.20.180.150" proto="6" length="48" tos="0x00" prec="0x00" ttl="127" srcport="1165" dstport="80" tcpflags="SYN"
    2011:07:13-14:04:08 ASG-BETA ulogd[5735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="0:8:74:e2[:D]8[:D]6" dstmac="0:4:23:9a:8a:f5" srcip="172.16.24.14" dstip="2.20.180.150" proto="6" length="48" tos="0x00" prec="0x00" ttl="127" srcport="1163" dstport="1935" tcpflags="SYN"
    2011:07:13-14:38:05 ASG-BETA ulogd[5735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="0:8:74:e2[:D]8[:D]6" dstmac="0:4:23:9a:8a:f5" srcip="172.16.24.14" dstip="2.20.180.150" proto="6" length="48" tos="0x00" prec="0x00" ttl="127" srcport="1329" dstport="443" tcpflags="SYN"
    2011:07:13-14:38:05 ASG-BETA ulogd[5735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="0:8:74:e2[:D]8[:D]6" dstmac="0:4:23:9a:8a:f5" srcip="172.16.24.14" dstip="2.20.180.150" proto="6" length="48" tos="0x00" prec="0x00" ttl="127" srcport="1330" dstport="1935" tcpflags="SYN"
    2011:07:13-14:38:05 ASG-BETA ulogd[5735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="0:8:74:e2[:D]8[:D]6" dstmac="0:4:23:9a:8a:f5" srcip="172.16.24.14" dstip="2.20.180.150" proto="6" length="48" tos="0x00" prec="0x00" ttl="127" srcport="1331" dstport="80" tcpflags="SYN"


    but with no success so after a while the traffic is only through the proxy....
    In attachment the complete proxy log session.
    proxy_log.zip
Reply
  • It seems it tries to establish the connection also witout the proxy:


    2011:07:13-14:03:48 ASG-BETA ulogd[5735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="0:8:74:e2[:D]8[:D]6" dstmac="0:4:23:9a:8a:f5" srcip="172.16.24.14" dstip="2.20.180.150" proto="6" length="48" tos="0x00" prec="0x00" ttl="127" srcport="1151" dstport="1935" tcpflags="SYN"
    2011:07:13-14:03:48 ASG-BETA ulogd[5735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="0:8:74:e2[:D]8[:D]6" dstmac="0:4:23:9a:8a:f5" srcip="172.16.24.14" dstip="2.20.180.150" proto="6" length="48" tos="0x00" prec="0x00" ttl="127" srcport="1152" dstport="443" tcpflags="SYN"
    2011:07:13-14:03:48 ASG-BETA ulogd[5735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="0:8:74:e2[:D]8[:D]6" dstmac="0:4:23:9a:8a:f5" srcip="172.16.24.14" dstip="2.20.180.150" proto="6" length="48" tos="0x00" prec="0x00" ttl="127" srcport="1153" dstport="80" tcpflags="SYN"
    2011:07:13-14:04:05 ASG-BETA ulogd[5735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="0:8:74:e2[:D]8[:D]6" dstmac="0:4:23:9a:8a:f5" srcip="172.16.24.14" dstip="2.20.180.150" proto="6" length="48" tos="0x00" prec="0x00" ttl="127" srcport="1163" dstport="1935" tcpflags="SYN"
    2011:07:13-14:04:05 ASG-BETA ulogd[5735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="0:8:74:e2[:D]8[:D]6" dstmac="0:4:23:9a:8a:f5" srcip="172.16.24.14" dstip="2.20.180.150" proto="6" length="48" tos="0x00" prec="0x00" ttl="127" srcport="1164" dstport="443" tcpflags="SYN"
    2011:07:13-14:04:06 ASG-BETA ulogd[5735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="0:8:74:e2[:D]8[:D]6" dstmac="0:4:23:9a:8a:f5" srcip="172.16.24.14" dstip="2.20.180.150" proto="6" length="48" tos="0x00" prec="0x00" ttl="127" srcport="1165" dstport="80" tcpflags="SYN"
    2011:07:13-14:04:08 ASG-BETA ulogd[5735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="0:8:74:e2[:D]8[:D]6" dstmac="0:4:23:9a:8a:f5" srcip="172.16.24.14" dstip="2.20.180.150" proto="6" length="48" tos="0x00" prec="0x00" ttl="127" srcport="1163" dstport="1935" tcpflags="SYN"
    2011:07:13-14:38:05 ASG-BETA ulogd[5735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="0:8:74:e2[:D]8[:D]6" dstmac="0:4:23:9a:8a:f5" srcip="172.16.24.14" dstip="2.20.180.150" proto="6" length="48" tos="0x00" prec="0x00" ttl="127" srcport="1329" dstport="443" tcpflags="SYN"
    2011:07:13-14:38:05 ASG-BETA ulogd[5735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="0:8:74:e2[:D]8[:D]6" dstmac="0:4:23:9a:8a:f5" srcip="172.16.24.14" dstip="2.20.180.150" proto="6" length="48" tos="0x00" prec="0x00" ttl="127" srcport="1330" dstport="1935" tcpflags="SYN"
    2011:07:13-14:38:05 ASG-BETA ulogd[5735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="0:8:74:e2[:D]8[:D]6" dstmac="0:4:23:9a:8a:f5" srcip="172.16.24.14" dstip="2.20.180.150" proto="6" length="48" tos="0x00" prec="0x00" ttl="127" srcport="1331" dstport="80" tcpflags="SYN"


    but with no success so after a while the traffic is only through the proxy....
    In attachment the complete proxy log session.
    proxy_log.zip
Children
No Data