Comments for Rod Morehead's Blog http://rmore.net Family, Faith, and Software Development Sat, 19 Nov 2011 21:18:49 +0000 hourly 1 http://wordpress.org/?v=3.3.1 Comment on Workaround for dansguardian and iTunes 9.1 by sackboii http://rmore.net/2010/04/09/workaround-for-dansguardian-and-itunes-9-1/comment-page-1/#comment-8802 sackboii Sat, 19 Nov 2011 21:18:49 +0000 http://rmore.net/?p=210#comment-8802 Another workaround is to hack the iTunes.dll file (on Windows) and replace every occurrence of 'apple.com.' with 'apple.com/'. Note that this will leave some URLs in the library with two trailing slashes (eg. 'apple.com//') but DansGuardian will correctly parse this and pass the URL through. Another workaround is to hack the iTunes.dll file (on Windows) and replace every occurrence of ‘apple.com.’ with ‘apple.com/’.

Note that this will leave some URLs in the library with two trailing slashes (eg. ‘apple.com//’) but DansGuardian will correctly parse this and pass the URL through.

]]> Comment on Allen, Texas (and your community) Needs to Get Around to Roundabouts by rmore http://rmore.net/2008/07/16/roundabouts/comment-page-1/#comment-8694 rmore Tue, 15 Nov 2011 23:40:52 +0000 http://rmore.net/2008/07/16/roundabouts/#comment-8694 Very true, this is US 75, not I-75. I will correct the post accordingly. Very true, this is US 75, not I-75. I will correct the post accordingly.

]]> Comment on Allen, Texas (and your community) Needs to Get Around to Roundabouts by _Jim http://rmore.net/2008/07/16/roundabouts/comment-page-1/#comment-8049 _Jim Mon, 03 Oct 2011 04:47:57 +0000 http://rmore.net/2008/07/16/roundabouts/#comment-8049 US-75 maybe? I-75 is *east* of the Mississippi River and nearer the east coast ... take heart, you're not the first to make that error! Professional on-the-air TV reporters in this market (DFW) have done it too ... US-75 maybe?

I-75 is *east* of the Mississippi River and nearer the east coast … take heart, you’re not the first to make that error! Professional on-the-air TV reporters in this market (DFW) have done it too …

]]> Comment on Workaround for dansguardian and iTunes 9.1 by joe http://rmore.net/2010/04/09/workaround-for-dansguardian-and-itunes-9-1/comment-page-1/#comment-4480 joe Tue, 11 Jan 2011 21:52:04 +0000 http://rmore.net/?p=210#comment-4480 Hi. I tried the patch this way patch -p0 < iTunes.patch It then asks what I want to patch. I saw HTTPHeader.cpp in your code and tried that. I get Hunk #1 FAILED at 900. This is Dansguardian-2.8.0.6-antivirus-6.4.3-google-1.3.1.1 source if that makes any difference. Please any help? TIA. Hi. I tried the patch this way

patch -p0 < iTunes.patch

It then asks what I want to patch. I saw HTTPHeader.cpp in your code and tried that.

I get
Hunk #1 FAILED at 900.
This is Dansguardian-2.8.0.6-antivirus-6.4.3-google-1.3.1.1 source if that makes any difference.
Please any help? TIA.

]]> Comment on Workaround for dansguardian and iTunes 9.1 by joe http://rmore.net/2010/04/09/workaround-for-dansguardian-and-itunes-9-1/comment-page-1/#comment-4453 joe Sat, 08 Jan 2011 21:45:02 +0000 http://rmore.net/?p=210#comment-4453 Hi. I installed DGAV from source but I'm not accustomed to applying patches. Can anyone provide guidance on this? Hi. I installed DGAV from source but I’m not accustomed to applying patches. Can anyone provide guidance on this?

]]> Comment on Workaround for dansguardian and iTunes 9.1 by DansGuardian Hates iTunes | Kimball's House Of Pain http://rmore.net/2010/04/09/workaround-for-dansguardian-and-itunes-9-1/comment-page-1/#comment-3511 DansGuardian Hates iTunes | Kimball's House Of Pain Mon, 23 Aug 2010 05:40:55 +0000 http://rmore.net/?p=210#comment-3511 [...] ran across this thread, which explains the problem, but none of their solutions were good ones for me.  I’m [...] [...] ran across this thread, which explains the problem, but none of their solutions were good ones for me.  I’m [...]

]]> Comment on Workaround for dansguardian and iTunes 9.1 by Bruce http://rmore.net/2010/04/09/workaround-for-dansguardian-and-itunes-9-1/comment-page-1/#comment-3304 Bruce Tue, 15 Jun 2010 18:09:57 +0000 http://rmore.net/?p=210#comment-3304 Updating to DansGuardian 2.10.1.1 (via CopPlus 3.02) did the trick for me, at least for normal access to the iTunes store. I still am unable to download the latest iPod touch updates, but I haven't determined if this is due to DansGuardian or not. Thanks for everyone's help in finding a workaround to what I would still call Apple's problem. Updating to DansGuardian 2.10.1.1 (via CopPlus 3.02) did the trick for me, at least for normal access to the iTunes store. I still am unable to download the latest iPod touch updates, but I haven’t determined if this is due to DansGuardian or not. Thanks for everyone’s help in finding a workaround to what I would still call Apple’s problem.

]]> Comment on Workaround for dansguardian and iTunes 9.1 by Greg http://rmore.net/2010/04/09/workaround-for-dansguardian-and-itunes-9-1/comment-page-1/#comment-3293 Greg Sat, 12 Jun 2010 20:11:48 +0000 http://rmore.net/?p=210#comment-3293 After more reading, I want to add two points: 1) Apple apparently says the URL is not malformed, and does not plan to fix it. See: http://tinyurl.com/27bqcvb 2) From the comments of others, Dansguardian 2.10.1.1 has already fixed this? See: http://tinyurl.com/2g8g3f8 After more reading, I want to add two points:
1) Apple apparently says the URL is not malformed, and does not plan to fix it. See: http://tinyurl.com/27bqcvb
2) From the comments of others, Dansguardian 2.10.1.1 has already fixed this? See: http://tinyurl.com/2g8g3f8

]]> Comment on Workaround for dansguardian and iTunes 9.1 by Greg http://rmore.net/2010/04/09/workaround-for-dansguardian-and-itunes-9-1/comment-page-1/#comment-3292 Greg Sat, 12 Jun 2010 19:14:44 +0000 http://rmore.net/?p=210#comment-3292 Thanks so much for this tip. I've been pulling my hair out trying to figure out what was happening. Some of my users have iTunes 9.0, and can connect just fine. iTunes 9.1 introduces this dang malformed URL. I applied the patch, ran "make" and copied my dansguardian binary over the old one. Now iTunes users can connect again to the Apple Store. Thanks so much for this tip. I’ve been pulling my hair out trying to figure out what was happening. Some of my users have iTunes 9.0, and can connect just fine. iTunes 9.1 introduces this dang malformed URL. I applied the patch, ran “make” and copied my dansguardian binary over the old one. Now iTunes users can connect again to the Apple Store.

]]> Comment on Workaround for dansguardian and iTunes 9.1 by Bruce http://rmore.net/2010/04/09/workaround-for-dansguardian-and-itunes-9-1/comment-page-1/#comment-3282 Bruce Thu, 10 Jun 2010 18:56:29 +0000 http://rmore.net/?p=210#comment-3282 I too tried adding apple.com. to the exception list to no avail. Can someone who got this working explain exactly where they added the domain to the "bypass list"? I am running IPCop 1.4.21 with CopPlus, which is DansGuardian 2.8. Thanks in advance! I too tried adding apple.com. to the exception list to no avail. Can someone who got this working explain exactly where they added the domain to the “bypass list”? I am running IPCop 1.4.21 with CopPlus, which is DansGuardian 2.8. Thanks in advance!

]]> Comment on Workaround for dansguardian and iTunes 9.1 by keymoo http://rmore.net/2010/04/09/workaround-for-dansguardian-and-itunes-9-1/comment-page-1/#comment-3249 keymoo Sun, 30 May 2010 16:16:39 +0000 http://rmore.net/?p=210#comment-3249 John/Mike, Which list did you add apple.com. to? I added it to exceptionsitelist and exceptionfilesitelist and iTunes still doesn't work (I did restart dansguardian). Any clues? Thanks for your help John/Mike,

Which list did you add apple.com. to? I added it to exceptionsitelist and exceptionfilesitelist and iTunes still doesn’t work (I did restart dansguardian). Any clues? Thanks for your help

]]> Comment on Workaround for dansguardian and iTunes 9.1 by Mike http://rmore.net/2010/04/09/workaround-for-dansguardian-and-itunes-9-1/comment-page-1/#comment-3211 Mike Thu, 13 May 2010 17:12:44 +0000 http://rmore.net/?p=210#comment-3211 John, thanks a bunch for your comment. This issue had been driving me nuts and I didn't have the option of applying patches and recompiling Dansguardian. I just did the same - added apple.com. to the exclude list and now iTunes is happy, and I can still keep Dansguardian active. John, thanks a bunch for your comment. This issue had been driving me nuts and I didn’t have the option of applying patches and recompiling Dansguardian.

I just did the same – added apple.com. to the exclude list and now iTunes is happy, and I can still keep Dansguardian active.

]]> Comment on Workaround for dansguardian and iTunes 9.1 by John http://rmore.net/2010/04/09/workaround-for-dansguardian-and-itunes-9-1/comment-page-1/#comment-3206 John Tue, 11 May 2010 22:16:49 +0000 http://rmore.net/?p=210#comment-3206 I have such trouble with Dansguardian, I'm reluctant to upset my apple cart. But, I tried adding *.apple.com. (with the trailing period) to the list of bypass domains, and it seem to work! I have such trouble with Dansguardian, I’m reluctant to upset my apple cart. But, I tried adding *.apple.com. (with the trailing period) to the list of bypass domains, and it seem to work!

]]> Comment on Workaround for dansguardian and iTunes 9.1 by Dr. Evil http://rmore.net/2010/04/09/workaround-for-dansguardian-and-itunes-9-1/comment-page-1/#comment-3188 Dr. Evil Thu, 29 Apr 2010 00:02:34 +0000 http://rmore.net/?p=210#comment-3188 Dave, great suggestion using iptables to route around DG. I had to make one minor change to have it work. Add -t nat to both your iptables lines... eg: iptables -A PREROUTING -t nat -i ${LAN} -p tcp -m tcp --dport 80 -d 65.126.84.65 -j ACCEPT iptables -A PREROUTING -t nat -i ${LAN} -p tcp -m tcp --dport 80 ! -d 192.168.1.0/24 -j REDIRECT --to-ports 8080 Dave, great suggestion using iptables to route around DG. I had to make one minor change to have it work. Add -t nat to both your iptables lines… eg:

iptables -A PREROUTING -t nat -i ${LAN} -p tcp -m tcp –dport 80 -d 65.126.84.65 -j ACCEPT
iptables -A PREROUTING -t nat -i ${LAN} -p tcp -m tcp –dport 80 ! -d 192.168.1.0/24 -j REDIRECT –to-ports 8080

]]> Comment on Workaround for dansguardian and iTunes 9.1 by Dave Jones http://rmore.net/2010/04/09/workaround-for-dansguardian-and-itunes-9-1/comment-page-1/#comment-3168 Dave Jones Sat, 17 Apr 2010 22:47:14 +0000 http://rmore.net/?p=210#comment-3168 Another option that I have done is to setup a dnsmasq server to resolve the "bad" hostname to a single IP then put an iptables rule just before the port redirect to 8080 to accept the port 80 traffic. This will send the web request from iTunes directly out bypassing DG. [root@server1 log]# nslookup ax.init.itunes.apple.com. Server: 127.0.0.1 Address: 127.0.0.1#53 Name: ax.init.itunes.apple.com Address: 65.126.84.65 iptables ============= # DansGuardian redirect -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -d 65.126.84.65 -j ACCEPT -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 ! -d 192.168.1.0/24 -j REDIRECT --to-ports 8080 Another option that I have done is to setup a dnsmasq server to resolve the “bad” hostname to a single IP then put an iptables rule just before the port redirect to 8080 to accept the port 80 traffic. This will send the web request from iTunes directly out bypassing DG.
[root@server1 log]# nslookup ax.init.itunes.apple.com.
Server: 127.0.0.1
Address: 127.0.0.1#53

Name: ax.init.itunes.apple.com
Address: 65.126.84.65

iptables
=============
# DansGuardian redirect
-A PREROUTING -i eth0 -p tcp -m tcp –dport 80 -d 65.126.84.65 -j ACCEPT
-A PREROUTING -i eth0 -p tcp -m tcp –dport 80 ! -d 192.168.1.0/24 -j REDIRECT –to-ports 8080

]]> Comment on Workaround for dansguardian and iTunes 9.1 by Gerald http://rmore.net/2010/04/09/workaround-for-dansguardian-and-itunes-9-1/comment-page-1/#comment-3161 Gerald Sat, 17 Apr 2010 16:17:43 +0000 http://rmore.net/?p=210#comment-3161 I wanted to post that I don't want to follow up *here* for smoothwall issues. Anything conversation-wise regarding SmoothWall/Dansguardian I'll be responding to here: http://community.smoothwall.org/forum/viewtopic.php?f=49&t=34309&start=0 I wanted to post that I don’t want to follow up *here* for smoothwall issues. Anything conversation-wise regarding SmoothWall/Dansguardian I’ll be responding to here: http://community.smoothwall.org/forum/viewtopic.php?f=49&t=34309&start=0

]]> Comment on Workaround for dansguardian and iTunes 9.1 by Gerald http://rmore.net/2010/04/09/workaround-for-dansguardian-and-itunes-9-1/comment-page-1/#comment-3159 Gerald Fri, 16 Apr 2010 18:29:49 +0000 http://rmore.net/?p=210#comment-3159 I recompiled 2.8.0.6 binary ONLY http://www.gwy.org/dansguardian and it's only for SmoothWall 3 32-bit. back up your /usr/sbin/dansguardian and replace it at your own risk with the download. I recompiled 2.8.0.6 binary ONLY http://www.gwy.org/dansguardian and it’s only for SmoothWall 3 32-bit. back up your /usr/sbin/dansguardian and replace it at your own risk with the download.

]]> Comment on Workaround for dansguardian and iTunes 9.1 by Gerald http://rmore.net/2010/04/09/workaround-for-dansguardian-and-itunes-9-1/comment-page-1/#comment-3157 Gerald Fri, 16 Apr 2010 03:30:58 +0000 http://rmore.net/?p=210#comment-3157 Steve H, it's possible, but it's not pleasant. There are quite a bit of configuration changes that the 2.10 dg has (and I'm trying to account for them) ... I'm exhausted right now. At the very minimum, libz is a new thing, there are a few configuration options that are brand new and missing from 2.8, and additional download manager things/templates. My problem is that I've made so many intermediate tests to just get the binary working that I may have missed something to relay. But if you ask me tomorrow, I'll probably be able to tell you the steps. I'm going to sleep now. :) (As an aside, these comments likely will not have been posted before tomorrow -- Friday). Steve H, it’s possible, but it’s not pleasant. There are quite a bit of configuration changes that the 2.10 dg has (and I’m trying to account for them) … I’m exhausted right now. At the very minimum, libz is a new thing, there are a few configuration options that are brand new and missing from 2.8, and additional download manager things/templates. My problem is that I’ve made so many intermediate tests to just get the binary working that I may have missed something to relay. But if you ask me tomorrow, I’ll probably be able to tell you the steps. I’m going to sleep now. :)

(As an aside, these comments likely will not have been posted before tomorrow — Friday).

]]> Comment on Workaround for dansguardian and iTunes 9.1 by Gerald http://rmore.net/2010/04/09/workaround-for-dansguardian-and-itunes-9-1/comment-page-1/#comment-3156 Gerald Fri, 16 Apr 2010 02:48:27 +0000 http://rmore.net/?p=210#comment-3156 I should point out that I'm not doing the "make install" for dansguardian. I'm also not certain of all the configuration options that were used in 2.8/Smoothwall Express 3. So far, I've *re*compiled: ./configure prefix= make (because I wanted dg to find the configs in /etc, not in /usr/local/etc) I should point out that I’m not doing the “make install” for dansguardian. I’m also not certain of all the configuration options that were used in 2.8/Smoothwall Express 3.
So far, I’ve *re*compiled:
./configure prefix=
make
(because I wanted dg to find the configs in /etc, not in /usr/local/etc)

]]> Comment on Workaround for dansguardian and iTunes 9.1 by Gerald Young http://rmore.net/2010/04/09/workaround-for-dansguardian-and-itunes-9-1/comment-page-1/#comment-3155 Gerald Young Fri, 16 Apr 2010 02:22:56 +0000 http://rmore.net/?p=210#comment-3155 I'm trying to work on dansguardian 2.10 on Smoothwall Express right now (it has the . chop already in it. I checked the source). The short answer is to download the devel iso from smoothwall.org, dansguardian 2.10 (install it in a virtual machine), and also zlib, pkg-config, and pcre. I'm *hoping* that all I'll really need to do is replace the binary dansguardian after making it. I haven't tried it yet, but I'll post back here my findings. So far, I've only compiled the dansguardian binary at home -- just now. I'll have to test it before I can verify proper operation. Also, the new 2.10 version of dansguardian is supposed to trap SSL, so it's a worthy upgrade for Smoothwall Express's dansguardian homebrew. I'm not certain what I'll have missed at this time, especially with regards to the clam antivirus integration, but if I find out, I'll let you know. Each of the downloads above: ./configure; make; make install but! pkg-config installs in /usr/local/bin, which isn't in the path. It appeared to be ok to copy it to /usr/bin (or softlink it) and dansguardian compiled. I’m trying to work on dansguardian 2.10 on Smoothwall Express right now (it has the . chop already in it. I checked the source). The short answer is to download the devel iso from smoothwall.org, dansguardian 2.10 (install it in a virtual machine), and also zlib, pkg-config, and pcre. I’m *hoping* that all I’ll really need to do is replace the binary dansguardian after making it. I haven’t tried it yet, but I’ll post back here my findings. So far, I’ve only compiled the dansguardian binary at home — just now. I’ll have to test it before I can verify proper operation. Also, the new 2.10 version of dansguardian is supposed to trap SSL, so it’s a worthy upgrade for Smoothwall Express’s dansguardian homebrew. I’m not certain what I’ll have missed at this time, especially with regards to the clam antivirus integration, but if I find out, I’ll let you know.

Each of the downloads above:
./configure; make; make install
but! pkg-config installs in /usr/local/bin, which isn’t in the path. It appeared to be ok to copy it to /usr/bin (or softlink it) and dansguardian compiled.

]]>