zorp

Download

zorp@lists.balabit.hu

June 2008

2 participants
2 discussions

Re: [zorp] Stacking programs doesn’t work and how to modify POST parameters?
by thomas.wenz＠gmx-topmail.de 20 Jul '08

20 Jul '08

Hi, Thanks a lot for your quick reply! I thought that Zorp 3.3 already exists because I saw press releases for the commercial version and some files in the download section named with 3.3. But ok, then it's clear why it would not install ;) I would be glad for any code or tutorial that could help me in checking POST data and controlling the response. Performance is not the problem because it's just for a very small amount of users and running on a dedicated server. I saw you've written something about AnyPy-proxy here (seems to be also a scenario with POST data) https://lists.balabit.hu/pipermail/zorp-hu/2007-May/002248.html but unfortunately I don't understand a word and online translator programs make it even less understandable ;) Generally, I would prefer the program stacking for checking POST data and responses through an external program instead of using custom python code. Do you know how long it will approximately take until the program stacking feature is released under GPL? I don't want to rush you and I'm very glad and thankful that Zorp is released in a GPL version and you're investing your valuable time in adding features to the GPL version. Unfortunately I've only a limited time frame until end of July to get this running and so I would need to look for a different temporary solution (either through AnyPy or through Squid, Snort_inline or so...) if it's released later and come back to Zorp when this feature is available... Thomas Wenz -- Psssst! Schon vom neuen GMX MultiMessenger gehört? Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger

3 19

Stacking programs doesn’t work and how to modify POST parameters?
by thomas.wenz＠gmx-topmail.de 30 Jun '08

30 Jun '08

Hi, I installed zorp 3.1.14 (GPL) in Debian Etch a few days ago. It works fine and is a really great program but I’ve got 2 problems with the http-proxy-module Iwhich I just can't find a soluation. Perhaps someone can help me, I don't know what to try further... 1. I want to be able to block sites with specific contents and in some cases modify the content. But I can't stack a program on the request or response. I always get an “Invalid Request” when I want to modify the request stack or an “Invalid Response” when I want to modify the response stack. I think this should normally work as there’s a test in tests/functional/http/transfer/chunked-conversion.test in the source package of Zorp. I used the following code from the example there and it does not work: class MyHttp(HttpProxy): def config(self): HttpProxy.config(self) self.timeout_request=30000 self.request_stack["GET"] = (HTTP_STK_DATA, "/bin/cat") self.response_stack["GET"] = (HTTP_STK_DATA, "/bin/cat") The other possibility I found in a doc at http://www.balabit.com/dl/white_papers/zorp-gateway-v3.1-tutorial-https-en.… and at http://www.balabit.hu/dl/html/zorp-reference-guide.html/ch01s01.html#embedd… doesn’t work either and shows the same error messages. The code looks like this: self.response_stack["GET"] = (HTTP_STK_DATA, (Z_STACK_PROGRAM, "/bin/sed '/http:/s//https:/g'")) Exchangig HTTP_STK_DATA with HTTP_STK_MIME doesn't change anything either. Exchanging self.request_stack["GET"] with self.request_stack["POST"] just shows the difference that the error only occurs on POST-Requests and not on normal GET because it's just ignored or so. The strange thing is that it seems like the external program isn’t even called because when I insert the command “touch /home/testuser/test”, the file is not touched. I also couldn’t find anything corresponding in strace output. 2. Is it somehow possible to modify/block POST-Parameters? Modifying the GET-Requests using the self.request_url-Parameter is easy but I could not find any way to do this with POST-data. I tried passing it to an external program for analyzing/modifying but this does not work (see 1)? I also tried an upgrade to 3.3 but it seems like common-gpl isn't included yet. When I left it out of my sources.list I then ran into problems concerning the locales package (could not be installed because of errors). Is 3.3 for another Debian version or Ubuntu? Could the 3.3 solve my problems above? Thanks in advance for your help, Thomas Wenz -- Ist Ihr Browser Vista-kompatibel? Jetzt die neuesten Browser-Versionen downloaden: http://www.gmx.net/de/go/browser

2 1