[twsocket] UDP IP Spoofing Possible with ICS?

2008-01-07 Thread JLIST
Hello all, Is it possible to UDP IP spoofing with twsocket component? Not that I'm trying to create a security threat - it's used in UDP firewall traversal, commonly used in VOIP apps. I think I should be able to do it with raw socket but it doesn't really work very reliably (and it doesn't work

Re: [twsocket] UDP IP Spoofing Possible with ICS?

2008-01-07 Thread JLIST
Hello Arno, Is it possible to UDP IP spoofing with twsocket component? The only possibility is to use raw sockets with any component built around winsock API. You may want to use WinPCap instead which allows sending raw packets as well. I see. In that case I suppose I can still use ICS

[twsocket] Some components not included in ICS v5

2008-01-25 Thread JLIST
It seems that some components are not included in ICS v5 project file. For example, DnsQuery. Was this intentional? Thanks, Jack -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at

Re: [twsocket] UDP Hole Punching

2008-02-23 Thread JLIST
My understanding is that it works on certain types of NAT firewalls. On these NATs, an external port is mapped to an internal IP:Port. If this is the case, all packets going to that external port will go to the internet IP:Port. Making it work is not that simple though, with the difficult part

Re: [twsocket] ICS won't work anymore...

2008-02-27 Thread JLIST
It looks like HttpTst User-Agent header is triggering the firewall on the web server. Use another User-Agent string, it will go through. Hey, I got a strange problem, I am downloading (XML) news from different website, and it all was working for a long time. But now it won't download anymore

[twsocket] SessionClosed and close/shutdown

2008-08-10 Thread JLIST
Hello all, ICS TWSocket only has a SessionClosed event for close of connection. I suppose a socket.close() from the remote side (or local) will trigger this event. I wonder if shutdown(0/1/2) will also trigger the event? For example, a browser using HTTP/1.0 often sends a request then does a

Re: [twsocket] SessionClosed and close/shutdown

2008-08-16 Thread JLIST
Hello Francois and Arno for the replies. I read online that on Unix, close() reduce a ref count for a socket. The last close() will call shutdown() automatically. I'm not sure if the same is true on Windows but I would think so because it makes sense and the whole TCP/IP thing starts on Unix

[twsocket] Poor man's SSL/TLS?

2008-09-10 Thread jlist
I was reading TLS's wikipedia page the other day. I find that although it's a lot of work, it is probably not too bad to write the SSL handshake and encryption from scratch, say, with ICS. I must be seriously overlooking the details and complexities. I wonder what are the potential issues of

Re: [twsocket] Poor man's SSL/TLS?

2008-09-11 Thread jlist
that is standard in unix world, with contributers like IBM etc.? -- Arno Garrels [TeamICS] http://www.overbyte.be/eng/overbyte/teamics.html jlist wrote: I was reading TLS's wikipedia page the other day. I find that although it's a lot of work, it is probably not too bad to write the SSL

[twsocket] ICS SSL Questions

2008-09-27 Thread jlist
Although I was a contributor ICS SSL, I haven't really got to play with it. I gave it a try last night with V6 and had a few questions. 1. I see two sets of .bdsproj files in Vc32 folder, one with Ssl in the file names and have USE_SSL;USE_ZLIB_OBJ defined, one without. Should I install both to

Re: [twsocket] ICS SSL Questions

2008-09-27 Thread jlist
Hello Arno, Thanks for the reply. 3. After I generated the cert files, HttpsTst demo worked fine. My question here is, is there an easy way to use an embedded cert and key string, as opposed to external files? I notice that the SslContext class takes file names. No way, however both are

Re: [twsocket] Fw: ICS SSL Questions

2008-09-27 Thread jlist
Hello Arno, Usually you do not need a certificate to connect to a SSL server. Your client might however communicate with multiple servers requesting a client certificate. If that is case leave both properties unassigned and handle event OnSslCliCertRequest instead, this is demonstrated in

Re: [twsocket] Fw: ICS SSL Questions

2008-09-28 Thread jlist
Thanks Arno, for the example. I'll give it a try. Private Key and certificate may exist in the same file. It's not a method in TX509Base, however you can derive your own class and add this functionality. Something like below should do the trick: -- To unsubscribe or change your settings