Re: [twsocket] New DLL hijacking vulnerability KB 2269637

2010-09-07 Thread Angus Robertson - Magenta Systems Ltd
I prefer this anyway since the load errors don't raise somewhere but where I can handle them easily: I also log the SSL version and directory at the point, since multiple SSL DLLs may be available on the PC and like to know the expected versions are being used: MySslContext.InitContext;

[twsocket] PASV fallback to public IP

2010-09-07 Thread Kristof Gajsek
Some FTP servers return wrong IP for PASV command (private instead of public). In such cases, obviously, FTP component can't connect to the server. Filezilla is smart enough to detect this and switch to public IP, instead: ... Command:TYPE I Response: 200 Type set to I. Command:

Re: [twsocket] PASV fallback to public IP

2010-09-07 Thread Angus Robertson - Magenta Systems Ltd
Some FTP servers return wrong IP for PASV command (private instead of public). In such cases, obviously, FTP component can't connect to the server. This is not really an FTP server issue, but a poorly designed NAT router that has not replaced the private IP address with a public IP.

Re: [twsocket] PASV fallback to public IP

2010-09-07 Thread Dave Baxter
-Original Message- From: Angus Robertson - Magenta Systems Ltd [mailto:an...@magsys.co.uk] Sent: 07 September 2010 09:47 To: twsocket@elists.org Subject: Re: [twsocket] PASV fallback to public IP Some FTP servers return wrong IP for PASV command (private instead of

[twsocket] HTTPcli: source path question

2010-09-07 Thread Anton S.
Currently I'm starting some research on HTTP downloads with ICS THttpCli. I want to add recursive download functionality but faced with impossibility to distinguish file of directory. Then I noticed that requests to folder without trailing slash (GET /somepath/foo/bar) are redirected to

Re: [twsocket] HTTPcli: source path question

2010-09-07 Thread Francois PIETTE
Currently I'm starting some research on HTTP downloads with ICS THttpCli. I want to add recursive download functionality but faced with impossibility to distinguish file of directory. In HTTP world, there is no real directory concept. There are only documents. It happens that some webservers,

Re: [twsocket] PASV fallback to public IP

2010-09-07 Thread Kristof Gajsek
... Do you have a specific example of a live public server returning a private IP that we can test? It will be very difficult to set-up, since it needs a crappy NAT router. Thanks for the explanation, Angus. This issue was reported by one of my users, who later determined the cause by himself,

Re: [twsocket] PASV fallback to public IP

2010-09-07 Thread Angus Robertson - Magenta Systems Ltd
This issue was reported by one of my users, who later determined the cause by himself, so I have no such public server available. I will ask if this is a public server that can be checked. I guess in his case replacing private with public IP may work, since FileZilla works, however I

Re: [twsocket] PASV fallback to public IP

2010-09-07 Thread Arno Garrels
Angus Robertson - Magenta Systems Ltd wrote: Doing the same on an FTP server is much harder, and really needs a public STUN server (as used for SIP for the same reason). Or simply: ?php echo $_SERVER[REMOTE_ADDR]; ? -- Arno Garrels -- To unsubscribe or change your settings for TWSocket

Re: [twsocket] PASV fallback to public IP

2010-09-07 Thread Arno Garrels
Arno Garrels wrote: Angus Robertson - Magenta Systems Ltd wrote: Doing the same on an FTP server is much harder, and really needs a public STUN server (as used for SIP for the same reason). Or simply: ?php echo $_SERVER[REMOTE_ADDR]; BTW: The NAT trouble will stop with IPv6. --

Re: [twsocket] HTTPcli: source path question

2010-09-07 Thread Zvone
Then I noticed that requests to folder without trailing slash (GET /somepath/foo/bar) are redirected to locations with slash (/somepath/foo/bar/) so it's easy to tell it's a directory. this depends how server is configured to treat trailing slash. In most cases it will treat it as access to

Re: [twsocket] PASV fallback to public IP

2010-09-07 Thread Angus Robertson - Magenta Systems Ltd
Or simply: ?php echo $_SERVER[REMOTE_ADDR]; This still needs be running on a public server somewhere! I don't have PHP on mine. BTW: The NAT trouble will stop with IPv6. And introduce lots of new problems instead. My new Sonicwall pass IPv6, but not process it. Angus -- To