rejetto forum

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - ninjapimp

Pages: 1 2 3 4 5
31
but i dont see a cert error

32
I've tried for a few hours but i can't make it work.

i get this error from the stunnel log:
2010.02.10 14:27:13 LOG7[3828:2352]: Snagged 64 random bytes from C:/.rnd
2010.02.10 14:27:13 LOG7[3828:2352]: Wrote 1024 new random bytes to C:/.rnd
2010.02.10 14:27:13 LOG7[3828:2352]: RAND_status claims sufficient entropy for the PRNG
2010.02.10 14:27:13 LOG7[3828:2352]: PRNG seeded successfully
2010.02.10 14:27:13 LOG7[3828:2352]: Certificate: stunnel.pem
2010.02.10 14:27:13 LOG7[3828:2352]: Certificate loaded
2010.02.10 14:27:13 LOG7[3828:2352]: Key file: stunnel.pem
2010.02.10 14:27:13 LOG7[3828:2352]: Private key loaded
2010.02.10 14:27:13 LOG7[3828:2352]: SSL context initialized for service https
2010.02.10 14:27:13 LOG5[3828:2352]: stunnel 4.29 on x86-pc-mingw32-gnu with OpenSSL 0.9.8l 5 Nov 2009
2010.02.10 14:27:13 LOG5[3828:2352]: Threading:WIN32 SSL:ENGINE Sockets:SELECT,IPv6
2010.02.10 14:27:13 LOG5[3828:1048]: No limit detected for the number of clients
2010.02.10 14:27:13 LOG7[3828:1048]: FD 200 in non-blocking mode
2010.02.10 14:27:13 LOG7[3828:1048]: SO_REUSEADDR option set on accept socket
2010.02.10 14:27:13 LOG3[3828:1048]: Error binding https to 0.0.0.0:443
2010.02.10 14:27:13 LOG3[3828:1048]: bind: Permission denied (WSAEACCES) (10013)

2010.02.10 14:27:13 LOG3[3828:1048]: Server is down
--------------------------------------------------------
i download stunnel from here: ftp://stunnel.mirt.net/stunnel/
i create a fresh PEM file from here: http://www.stunnel.org/pem/
here is my list of what I've done to set it up thus far:
1. make a new fodler called HFS_2
2. put a copy of hfs253.exe in it and rename it to HFS_SSL_253.exe
3. download stunnel and extract it to same folder as hfs
4. place the created PEM file in same folder as HFS
5. i then read http://www.rejetto.com/wiki/index.php?title=HFS:_Secure_your_server
6. edit/create the stunnel.conf file which looks like this:
; Lines preceded with a “;” are comments
; Empty lines are ignored
; For more options and details: see the manual (stunnel.html)

; File with certificate and private key
cert = stunnel.pem
key = stunnel.pem

; Log (1= minimal, 5=recommended, 7=all) and log file)
; Preceed with a “;” to disable logging
debug = 5
output = stunnel.log

; Some performance tuning
socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1

; Data compression algorithm: zlib or rle
compression = zlib

; SSL bug options / NO SSL:v2 (SSLv3 and TLSv1 is enabled)
options = ALL
options = NO_SSLv2

; Service-level configuration
; Stunnel listens to port 443 (HTTPS) to any IP
; and connects to port 44300 (HFS) on localhost
[https]
accept = 0.0.0.0:443
connect = 127.0.0.1:44300
TIMEOUTclose = 0

7. in HFS i change IP address to 127.0.0.1
8. In HFS i change port to 443
9. my router firewall is also forwarding port 443


if i type the url of my site it fails
https://xxx.server.com:443    says page not found
i'm not ahving much luck. stunnel seems to accept the stunnel.pem file fine
http://xxx.server.com:443   this works but its not in SSL..how to make it go into SSL?

what am I doing wrong. I believe I have all the proper files in the folder as they should be and followed the wiki step by step except I created online my key i did not use openssl.

can someone take pity and point out the obvious mistake im making.

note: i did go back and try to create my own PEM file using openssl but could not amke it work
openssl.exe req -new -x509 -days 3650 -nodes -config pem.conf -out stunnel.pem -keyout stunnel.pem

problem is theres no such file openssl.exe
i dowbload openssl-0.9.8l.tar.gz and extract and search for openssl.exe but its not there.

can i bypass using openssl to make my key and just use the website to create one for me? i was told that would work just as good to.



33
i've put back the rawr template

i have a user who complains he gets the access denied problem repeatedly...

here is copy n paste from the log
24.164.xxx.xxx - - [07/Feb/2010:11:27:45 -0600] "GET /FTP/MAC%20-%20OSX%20-%20APPLE/Games/Quake%204%20(MAC)/Quake%204%20(MAC).rar HTTP/1.1" 200 - "http://www.xxxxx.com:2000/FTP/MAC%20-%20OSX%20-%20APPLE/Games/Quake%204%20(MAC)/ "

i try to reproduce but i dont get error

theres only one person trying to leech so i 'm certain its not bandwidth issues.

what else can i do to solve this pesky problem?

if i use the Damn template i can't reproduce but if i use the rawr template i get thsi problem.

i've tried other rawr templates and i get access denied too so perhaps its something int he coding of the template that causes this problem.

34
sorry, there was a problem and I panic

when i did the reset temp options, the HFS no longer worked.
yes it did change the template but no one could actually access it so i panic and closed HFS and restarted. when i did this it reloaded the rawr template.

i think it changed my port. i dont use port 80 because I use IIS. HFS will not work if port 80 is being used by IIS.

once I changed the template to something less fancy...i'm using HFS Damn now as my new template and the access denied is gone.

it seems the access denied message only appears when i use the rawr template.

i just now applied those log options you mentioned. and i'll test to see if i see 403s in the log now with the hfs damn tempalte in place.

so far since using hfs damn template, no one has mentioned they getting error message so this is a good thing.
i loved the rawr template as it was alot more informative compared to this hfs damn which is a lil too simplistic for my taste but as long as theres no errors its better than nothing.
thanks again


35
Bug reports / Re: contsant "new version available"
« on: January 29, 2010, 09:51:48 AM »
sorry allow me to clarify.
all i'm saying is, there is a nag which reminds you to update a new version. this message appears over and over.
if user accepts messages and updates to newer build ( which it is not), the message will appear again even though its not a newer build.

expected result, is: new build appears, update and message does not appear again.

yes i did turn off the update so it won't come again.

keep in mind with this option now turned off the user won't see it and hence will never update to a newer build meaning no testing of latest build.


once i turned off update message was gone so problem is fixed.

36
Bug reports / contsant "new version available"
« on: January 29, 2010, 04:02:07 AM »
everytime it checks it says theres a new version but i'm already running beta 252.
i update it anyways...
same thing again when it checks. it like in some kind of loop.

37
i think i may have figured it out
've been using a rawr template. and get access denied
but if i install the basic hfs template the erro does nto come
so its something most likely with rawr templates.
i've made no changes to the template except for a small jpeg logo. otherwise the template is just as they released it.
bummer, that was  beautiful template, i loved the layout

prior to 251 i never got this error though so maybe something int he rawr template code needs updating for 252
i'm not sure

i'll keep testing the template to see if i can reproduce the error



38
ok, i did that. reset
but i still get it

it took 3 refreshes to get the access denied.
no but me is on it, simply going into a folder, not even trying to leech a file or anything like that.

if i refresh page access denied goes away
its just keeps appearing randomly for no reason that i can tell

let me try it without the rawr template. i'll just use vanilla version so if i get access denied also

39
Bug reports / Re: unable to stream movie files with 250
« on: January 27, 2010, 04:48:02 PM »
i've made access to the files as open as possible.
i've tried from multiple computers. i go to my friends place and try every laptop computer i get my hands on. i try every browser they use, safari, mozilla, IE. also several different players, quicktime, windows media classic, windows media player. vlc, etc and they all seem to have same result, it resorts to saving the file first.
for some odd reason i can't get it to stream
now same exact file...that wont stream, when i access it via the IIS, the media then streams by default.

for some reason when using HFS it asks user to save file and what to open it with (defaulted)
but when i access the media via the IIS web server it'll stream the file be default, otherwise it asks me what to open it with which then streams it.

its not a stop ship problem for me as i have IIS to rely on and have done so before hfs came along, so its not a problem, i thought i'd mention it, maybe others might experience same problem if streaming.

i've asked some friends and some are able to stream which confuses me, maybe it really is a problem with the users PC and how windows sees the file and not with hfs.

i'll keep playing with it see if I can find a clue.

40
what can i do to further troubleshoot this problem?
i've got alot of users who it my site who complain saying the get access denied
i'm not sure how to fix this
my HFS is a pretty simple setup, i simply add a "real" folder and use a custom rawr template and thats about it.

am I the only person with this problem? if so what could be causing it?

the work around is to refresh.


using IIS I never see this problem and I'm sahring exact same folder yet for some reason HFS keeps saying access denied but if one does refresh problem goes away. the issue can appear randomly at any folder for no apparent reason even when theres only 1 person browsing the HFS.

here is my customized options:
only-1-instance=no
# default: yes

easy=no
# default: yes

port=2000
# default:

files-box-ratio=0.206489675516224
# default: 0

log-file-name=hfs_log_month-%m%.log
# default:

log-date=yes
# default: no

log-bytes-sent=yes
# default: no

log-apache-format=%h %l %u %t "%r" %>s %b "%{Referer}i %z"
# default:

tpl-file=D:\hfs\RAWR-Template-0.1.2\RAWR-Template-0.1.2.tpl
# default:

auto-save-vfs=yes
# default: no

tray-icon-for-each-download=no
# default: yes

last-dialog-folder=\\thecus\raid5\FTP
# default: D:\hfs

auto-save-vfs-every=600
# default: 0

last-update-check=40205.135018125
# default: 0

tray-shows=connections
# default: downloads

max-ips=10
# default: 0

max-ips-downloading=10
# default: 0

max-contemporary-dls=10
# default: 0

max-contemporary-dls-ip=1
# default: 0

open-in-browser=*.htm;*.html;*.jpg;*.jpeg;*.gif;*.png;*.txt;*.swf;*.svg;*.avi;*.mpg;*.mkv;*.m4v;*.mp4;*.mpeg
# default: *.htm;*.html;*.jpg;*.jpeg;*.gif;*.png;*.txt;*.swf;*.svg

connections-timeout=20
# default: 60

last-file-open=D:\hfs\iphonoe.vfs
# default:

find-external-on-startup=yes
# default: no

encode-spaces=no
# default: yes

in-browser-if-mime=yes
# default: no

icon-masks=.ipa|18||.rar|10001||
# default:

icon-masks-user-images=10001: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|
# default:

recent-files=D:\hfs\iphonoe.vfs
# default:

trusted-files=D:\hfs\iphonoe.vfs
# default:

compressed-browsing=no
# default: yes

out-total=298494868347
# default: 0

in-total=162478807
# default: 0

hits-total=357463
# default: 0

downloads-total=9540
# default: 0

connections-columns=IP address;120|File;180|Progress;84|Status;180|Speed;60|Time left;55|
# default: IP address;120|File;180|Status;180|Speed;60|Time left;55|Progress;70|

ip-services=http://www.dovedove.it/hfs/ip.php|;http://www.checkip.org|color=green>;http://www.whatismyip.org/|;http://www.melauto.it/public/rejetto/ip.php|;http://checkip.dyndns.org|:;http://2ip.ru|#0033FF">;http://www.canyouseeme.org|td><b>
# default:

ip-services-time=40199.7613959375
# default: 0


41
the problem with access denied
if I access the same folders and files via IIS web server i never see this issue, it only comes from HFS. thus far I've had 300,000 hits on my HFS. I dont know how many get the access denied, but I know some are telling me about it. I've set HFS with as little restrictions as possible. as for network errors, the load is very minimal, sometimes only 1 person is on HFS and problem comes so it can't be bandwidth.

i will test more via network mapping as i'm using the UNC method to map the folder to VFS as opposed to a drive letter mapping.
i'm not sure why i can not reproduce it all the time, its random and the problem happens from within my local lan and outside my lan. the strange thing is, using IIS webserver on my windows server 2008 I've never seen this problem it only appears on HFS. I'll keep playing with it, maybe I'll find what causes it.

thanks for the help and tips.


42
today i upgraded to beta build 251. and right away i get. this in breadcumbs sections, Home/Server Error

same problem

as for your requests, i hover over the folder in question
url:/ftp/
path: \\thecus\raid5\FTP
default file mask: index.htm*;default.htm* [inheited]
realm: devils rage bbs [inherited]
don't consider as download (mask): thumbs.db


if i refresh page,, error goes away. if i go further into folders the problem may reappear or not

i've tested this outside my lan from another ISP ip address and same problem

it sorta comes and goes i can eventually reproduce the problem but not 100% time, it sort of just comes randomly from any folder it seems.

43
Bug reports / Re: unable to stream movie files with 250
« on: January 12, 2010, 04:47:46 PM »
no worries. i gave up on this
i jsut stayed with IIS7 for streaming my movies.
i dont think hfs was designed for streaming.

i could not figure out why it wont stream. I know it works from IIS, so i know the files movies are valid and working as is the server but for some reason hfs just chooses to save the file rather than stream it.

i love my hfs for what it does which is a file server to the public, nothing more nothing less.

thanks again


44
HFS ~ HTTP File Server / how to hide a file in HFS
« on: January 10, 2010, 04:47:39 AM »
for some reason, windows always makes a Thumbs.db file when i watch movies or pictures.
i've not figured out how to prevent this yet

i did a search and found this:
1.  In the HFS VFS gui right click on the shared folder
2.  Select 'Properties' then 'File Masks'
3.  In the 'Files Filter' column add the file extensions you want to share
    example - *.jpg  (if you have more than one, seperate the extensions with a ;)
    example - *.jpg;*.avi
4.  Click on Apply

but it does not work for me.
in file masks tab, i see Files Filter
so i put thumbs.db in this field. i apply

but now when i surf into the folder via web browser i get an odd behavior. when i try to list a folder that contains thumbs.db it asks me to save it.

the expected behavior is for it to not display.

am i missing something? did something vhange in the beta builds?
i tried putting *.db in other fields but no luck.

it seems putting *.db in any fields makes the folder unbrowseable or asks to save the thumbs.db file

any ideas?

thanks





45
Today I add a new folder, real folder.
btu when i try to surf to it, i get : Access Denied
This resource is not accessible, sorry.

I'm not sure why it wont work, it works for otehr folders I've done

any ideas?


this error comes via localhost mode or using full internet address
via local host it lets go deep into 1 folder then error comes

i can verify path is viable as i can access it via windows explorer

using latest beta build.

Pages: 1 2 3 4 5