ProxHTTPSProxyMII: Reloaded
|
Jul. 17, 2019, 05:15 PM
Post: #346
|
|||
|
|||
RE: ProxHTTPSProxyMII: Reloaded
(Jul. 13, 2019 09:09 PM)amy Wrote: Looking at that page, there is some sort of tracking/fingerprinting JavaScript on it, which I did not run but it looks very suspicious to me --- stuff like that reminds me of hacked sites where a malware script has been injected.I suspect this is some kind of protection. |
|||
Oct. 03, 2019, 07:28 PM
Post: #347
|
|||
|
|||
RE: ProxHTTPSProxyMII: Reloaded
Once I already asked, but no solution was found. Therefore, I will now describe the problem in more detail. There is a system on Windows 7 x86. Access to the Internet is possible only through the corporate proxy 192.168.32.1:80. So I made the following settings, in ProxHTTPSProxyMII added:
Code: [GENERAL] in Privoxy: Code: ... In this form, everything works. But there is one problem, sometimes you need to add some sites to ProxHTTPSProxyMII in the [SSL Pass-Thru] section, because they do not work through the proxy. For example, I added http://www.google.com. As a result, I get google website not working. The error message appears: "[Errno 11004] getaddrinfo failed: https://www.google.com:443/", as if it could not resolve http://www.google.com. The problem is that http://www.google.com on this computer resolves normally if I register only the corporate proxy in the browser. Well, if you do not add anything to the [SSL Pass-Thru] section, it also works. Because it was just an example, then I add other sites there, but they do not work anyway. The question is, why does a site added to the [SSL Pass-Thru] section stop working? In the network settings of the network card, the IP address of the gateway is specified manually (it matches the proxy) and the ip address of this computer. Does not work (in the [SSL Pass-Thru] section): Works: |
|||
Oct. 05, 2019, 04:01 AM
Post: #348
|
|||
|
|||
RE: ProxHTTPSProxyMII: Reloaded
(Oct. 03, 2019 07:28 PM)vlad_s Wrote: The question is, why does a site added to the [SSL Pass-Thru] section stop working? I think there is at least one bug in ProxHTTPSProxyMII. In my tests over the last several hours on Win10, adding a site to the [SSL Pass-Thru] section may also bypass the DefaultProxy. If true, sites you added to [SSL Pass-Thru] may not work because the corporate proxy isn't being used. (Oct. 03, 2019 07:28 PM)vlad_s Wrote: Access to the Internet is possible only through the corporate proxy 192.168.32.1:80 If this proxy is also a man-in-the-middle, you may want to add its certificate to ProxHTTPSProxyMII's cacert.pem. |
|||
Oct. 05, 2019, 07:05 PM
(This post was last modified: Oct. 05, 2019 07:16 PM by vlad_s.)
Post: #349
|
|||
|
|||
RE: ProxHTTPSProxyMII: Reloaded
So the sites in the [SSL Pass-Thru] section generally go right despite the setting "DefaultProxy = http://192.168.32.1:80" (I correctly understood that this is for a higher proxy)? That is not pleasant. The corporate proxy does not decrypt the traffic, but simply allows it apparently through the CONNECT method.
And if I add to the [PROXY http://192.168.32.1:80] section (which is not currently available) non-working sites? Can this help? |
|||
Oct. 06, 2019, 04:18 AM
(This post was last modified: Oct. 06, 2019 08:24 PM by JJoe.)
Post: #350
|
|||
|
|||
RE: ProxHTTPSProxyMII: Reloaded
(Oct. 05, 2019 07:05 PM)vlad_s Wrote: And if I add to the [PROXY http://192.168.32.1:80] section (which is not currently available) non-working sites? Can this help? Doesn't help me. I should note that, for these tests, I have been using the Proxomitron as a DefaultProxy. Code: [GENERAL] Edit: added ", for these tests," for clarity |
|||
Oct. 06, 2019, 05:33 PM
(This post was last modified: Oct. 06, 2019 05:34 PM by vlad_s.)
Post: #351
|
|||
|
|||
RE: ProxHTTPSProxyMII: Reloaded
I do not understand what then is DefaultProxy? I am using Privoxy + ProxHTTPSProxyMII. On linux, I use the same thing, but DefaultProxy is not involved in my case (commented out). The scheme on Windows 7 is used elsewhere, but there, as I already described, has its own proxy and the Internet only works through it. I understood so that DefaultProxy is a parent proxy, i.e. the one that 192.168.32.1:80? If the Internet goes "directly", then you do not need to register any DefaultProxy?
|
|||
Oct. 06, 2019, 08:25 PM
Post: #352
|
|||
|
|||
RE: ProxHTTPSProxyMII: Reloaded
(Oct. 06, 2019 05:33 PM)vlad_s Wrote: I do not understand what then is DefaultProxy?... This is correct. Looks like you understand. (Oct. 06, 2019 04:18 AM)JJoe Wrote: I should note that, for these tests, I have been using the Proxomitron as a DefaultProxy. Usually, I don't use a DefaultProxy. I needed to add a DefaultProxy to check for bugs. So, I used the Proxomitron. This means ProxHTTPSProxyMII FrontPort is directly connected to its RearPort. Which should work but... I have not extensively tested. |
|||
Nov. 29, 2020, 10:20 AM
(This post was last modified: Nov. 29, 2020 10:27 AM by vlad_s.)
Post: #353
|
|||
|
|||
RE: ProxHTTPSProxyMII: Reloaded
Some sites (mostly stores) are not loaded via ProxHTTPSProxyMII even if you don't use Privoxy, i.e. if ProxHTTPSProxyMII is "closed on itself". There is a message on the Internet that this is protection against parsing and you need to use some kind of selenium. How to get this off within ProxHTTPSProxyMII; whether it is possible to cut the verification code using Privoxy. Here is the source code for such a site (http://www.vseinstrumenti.ru), passed through ProxHTTPSProxyMII:
Code: <!DOCTYPE html> |
|||
Dec. 02, 2020, 05:17 AM
(This post was last modified: Feb. 04, 2022 04:06 PM by JJoe.)
Post: #354
|
|||
|
|||
RE: ProxHTTPSProxyMII: Reloaded
(Nov. 29, 2020 10:20 AM)vlad_s Wrote: Some sites (mostly stores) are not loaded via ProxHTTPSProxyMII even if you don't use Privoxy, i.e. if ProxHTTPSProxyMII is "closed on itself". There is a message on the Internet that this is protection against parsing and you need to use some kind of selenium. How to get this off within ProxHTTPSProxyMII; whether it is possible to cut the verification code using Privoxy. Here is the source code for such a site (www.vseinstrumenti.ru), passed through ProxHTTPSProxyMII: Browsers usually use the GET method to access https sites. Our proxies use the CONNECT method when You won't be able to filter but www.vseinstrumenti.ru may work after you add Code: www.vseinstrumenti.ru to the [SSL Pass-Thru] section of config.ini Edit Dec. 02, 2020 01:57: Correction (strikethough) to reflect whenever's post below. Edit Dec. 06, 2020: Added more. |
|||
Dec. 02, 2020, 07:19 AM
(This post was last modified: Dec. 02, 2020 07:20 AM by whenever.)
Post: #355
|
|||
|
|||
RE: ProxHTTPSProxyMII: Reloaded | |||
Dec. 02, 2020, 06:39 PM
(This post was last modified: Feb. 04, 2022 04:09 PM by JJoe.)
Post: #356
|
|||
|
|||
RE: ProxHTTPSProxyMII: Reloaded
(Dec. 02, 2020 07:19 AM)whenever Wrote: ... Pleased to see you. Hope all is well. Site's code has changed. Proxomitron can alter the new code but there is still some unexpected behavior. Previously, a direct or SSL Pass-Thru request for www.vseinstrumenti.ru would refresh to www.vseinstrumenti.ru/ciez2a. A request with Proxomitron or ProxHTTPSProxyMII active but not filtering would refresh to empty screen at www.vseinstrumenti.ru/?. I'll chase this some more later. Got to go now. Edit: Removed confusion |
|||
Dec. 03, 2020, 02:45 AM
Post: #357
|
|||
|
|||
RE: ProxHTTPSProxyMII: Reloaded
(Dec. 02, 2020 06:39 PM)JJoe Wrote: A request with Proxomitron or ProxHTTPSProxyMII active but not filtering would refresh to empty screen at www.vseinstrumenti.ru/?.I can access that site without problem, with Proxomitron (Reborn) active and filtering. That suggests the problem may be in the browser. |
|||
Dec. 03, 2020, 04:05 AM
(This post was last modified: Dec. 03, 2020 04:15 AM by JJoe.)
Post: #358
|
|||
|
|||
RE: ProxHTTPSProxyMII: Reloaded
(Dec. 03, 2020 02:45 AM)amy Wrote: I can access that site without problem, with Proxomitron (Reborn) active and filtering. That suggests the problem may be in the browser. So can I. The site changed coding between my first and second posts. Perhaps our activity led them to reconsider but it makes solving the puzzle more difficult. ATM I'm wondering, if they polled our cipher suites to detect us. And if Cloudflare does the same. When I visit https://offerup.com/, with the Proxomitron active, Cloudflare returns 403 Forbidden with a CAPTCHA form. The "unexpected behavior" that I mentioned at vseinstrumenti is a different puzzle. Also pleased to see you and vlad_s. Hope all is well. |
|||
Dec. 06, 2020, 11:36 AM
(This post was last modified: Feb. 04, 2022 03:55 PM by JJoe.)
Post: #359
|
|||
|
|||
RE: ProxHTTPSProxyMII: Reloaded
(Dec. 03, 2020 02:45 AM)amy Wrote:No, the browser is fine if you make an exception for that site.(Dec. 02, 2020 06:39 PM)JJoe Wrote: A request with Proxomitron or ProxHTTPSProxyMII active but not filtering would refresh to empty screen at www.vseinstrumenti.ru/?.I can access that site without problem, with Proxomitron (Reborn) active and filtering. That suggests the problem may be in the browser. (Dec. 02, 2020 05:17 AM)JJoe Wrote: You won't be able to filter but www.vseinstrumenti.ru may work after you addAdded, but it did not help either. As a result, I made another unrelated list of exclusions for such sites, it is processed by another proxy. By the way, in Privoxy 3.0.29 you can now filter https . Edit by JJoe: Added strikethough |
|||
Dec. 06, 2020, 06:13 PM
Post: #360
|
|||
|
|||
RE: ProxHTTPSProxyMII: Reloaded
(Dec. 06, 2020 11:36 AM)vlad_s Wrote:(Dec. 02, 2020 05:17 AM)JJoe Wrote: You won't be able to filter but www.vseinstrumenti.ru may work after you addAdded, but it did not help either. I'm now wondering why it worked for me... (Dec. 06, 2020 11:36 AM)vlad_s Wrote: By the way, in Privoxy 3.0.29 you can now filter https . Is good news that somebody should post, https://prxbx.com/forums/forumdisplay.php?fid=49 |
|||
« Next Oldest | Next Newest »
|