Topic: itunes and dansguardian problem

[tdbsoft]

Having an issue with Dansguardian blocking access to itunes store website. The error is due to a malformed URL EG ax.init.itunes.apple.com./ the full stop at the end is caught by Dansguardian and rejected.  I have searched this forum and googled the web but to no avail.  Current version of Dansguardian available for SME is DansGuardian 2.10.0.3 however DansGuardian 2.10.1.1 is released and is said to fix the issue but not SME compatible I would presume.

Has anyone encountered this issue and have a work-around or patch?

Thanks

[cactus]

AFAIK that URL should never work, URLs are not allowed to end with a dot. Even if you would allow it, it should not work on the internet, from http://www.ietf.org/rfc/rfc0952.txt:

   1. A "name" (Net, Host, Gateway, or Domain name) is a text string up
   to 24 characters drawn from the alphabet (A-Z), digits (0-9), minus
   sign (-), and period (.).  Note that periods are only allowed when
   they serve to delimit components of "domain style names". (See
   RFC-921, "Domain Name System Implementation Schedule", for
   background).  No blank or space characters are permitted as part of a
   name. No distinction is made between upper and lower case.  The first
   character must be an alpha character.  The last character must not be
   a minus sign or period. 

[tdbsoft]

Yes I agree the URL is invalid, but Apple's stance is that the URL is correct and they will not be changing.

Prior to itunes version 9.1 I believe the URL was valid and worked with Dansguadian.  After itunes 9.1 Dansguardian will not let the address through as it is caught as malformed.
Adding an exception to Dansguardian will not work as the Malformed URL is caught before it checks the exception list.

In summary Apple should fix the URL but won't, Dansguardian have fixed in version 2.10.1.1 but not yet available in the SME flavor.

Does anyone have a work-a-round or have compiled the new version of Dansguardian for SME 7.x?

[janet]

tdbsoft

Does anyone have a work-a-round .....

Temporarily disable with the following
config setprop squid TransparentPort 3128
config setprop squid Transparent yes
config delprop dansguardian portblocking
signal-event post-upgrade; signal-event reboot

Do your download/upgrade from apple store and then re-enable with
config setprop squid TransparentPort 8080
config setprop squid Transparent yes
config setprop dansguardian portblocking yes
signal-event post-upgrade; signal-event reboot

[tdbsoft]

Mary, thanks for the suggestion, but I would need used on daily basis so need a more durable work-a-round or SME compiled version Dansguardian 2.10.1.1

[Gaetan]

Hi,
Any news on this ?
I have the same issue.
Thanks