Strange iBurst proxy server with ICAP

W

Wolfblitz

New Member
Joined
Apr 13, 2006
Messages
5
Reaction score
0
Location
Pretoria
I've got an iburst connection and my own proxy server. I was browsing the web when suddenly the one site just gave me an error "connection timed out" message. I checked some other sites and they opened quite fast without any problems, that's when I noticed that there was something strange about the error message. I had a look at the response headers I received and found this:

Server: squid/2.6.STABLE14+ICAP
Date: Tue, 08 Jan 2008 19:31:44 GMT
Content-Type: text/html
Content-Length: 676
Expires: Tue, 08 Jan 2008 19:31:44 GMT
X-Squid-Error: ERR_CONNECT_FAIL 60
X-Cache: MISS from opteq01.iburst.co.za, HIT from proxy.localdomain.local
Age: 142
X-Cache-Lookup: HIT from proxy.localdomain.local:3128
Via: 1.0 opteq01.iburst.co.za:3128 (squid/2.6.STABLE14+ICAP), 1.0 chr
Proxy-Connection: close
504 Gateway Time-out

I checked the response headers from the other sites and none of them contained anything about this opteq01 proxy. I checked a few things and found the following for opteq01.iburst.co.za:

196.2.124.252 1.1 opteq01.iburst.co.za:3128 (squid/2.6.STABLE14+ICAP)

It would seem that iburst is running a Squid proxy server that is ICAP enabled and they are routing some traffic through it for some reason. ICAP basically allows Squid to seamlessly be extended with new functions such as content filtering, virus scanning, content adaptation etc..

Here is the link of a know product URL="http://www.securecomputing.com/index.cfm?skey=22&lang=en"]Webwasher[/URL] that can plug into Squid using ICAP offering the following functionality:
- URL filtering (blocking you)
- Anti-Malware
- Anti-Virus
- SSL Scanner (secure internet site scanning)
- Content reporter (reports what you were browsing)
- Instant Messaging and peer-to-peer security (throttling and access control)
- SecureCache

What traffic they are routing through it and why I don't know but this is the second time I have picked this up. What are they up to? Any ideas?
 
Dunno, why don't they just give us what we pay for and stop using the excuse of DOS attacks. They spent so much time and money on chasing people away. Why not use the time and money to train their staff properly.
 
I think you have to be registered with RS to download these days. Try google to search for the link to RS. It worked for me last time I tried.
 
sigh

this proxy is getting on my t!ts. I have a few clients with iBurst connections wondering why their website is timing out on our dedicated server, meanwhile their proxy is screwing everything randomly.

thanks iBurst...

Has anyone got any idea about how this filtering is actually being implemented - it doesn't seem to be filtering all sites?

This also means that internal to iBurst itself traffic is going through at least 2 proxy's now (at least in JHB/PTA) - let alone the higher tier ISP's "transparent" proxy/cache's. I don't trust iBurst to butter bread forget setting up this kind of thing!

Oh well - I wasted my 5 seconds for today and logged an email complaint for them to ignore, thinking of doing that every time i get a timeout. They waste my 5 sec, i'll at least bug them also.
 
“this proxy is getting on my t!ts.” Don’t worry not that it’s any consolation but you are not the only one. The use of multiple proxy servers are insane, to say the least. iBurst tried the same in Cape Town and it was a total failure, with most sites being inaccessible...
 
hey guys long time no see hey.

i came here because i noticed that i can't download from rapidshare any more. i turned on my TOR network, and it worked fine, just a bit slower. so it seems maybe they are censoring things like they did with bittorrent.

what a bunch of tards.
 
Yep, seems to be filtering audio files in some cases. In my case .aa files from Audible.com and some mp3's i purchased. I managed to get some files from one server, but a mate of mine who lives in Australia had to get the rest for me.
Tried to contact helpdesk, but so far, no response.
 
Last edited:
Yep, some of the mp3s that were stored on a second server were coming though fine. It was only a server beginning with a certain IP where the files were being blocked. I could ping the server with no problem though.

iBurst have come back and <The request has been escalated for further assistance and the problem should be resolved soon.>
Whoopee! Into the black-hole we go.
 
Snotface said:
iBurst have come back and <The request has been escalated for further assistance and the problem should be resolved soon.>
Whoopee! Into the black-hole we go.
Click to expand...

At least they bothered to reply before dropping you into the black hole... :rolleyes:
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X