1

I am trying to install some Magento extensions however it keeps timing out. When I run a trace through ISA Server 2004 I can't see any denied traffic. The only thing I do get is a http proxy closed status:

A connection was abortively closed after one of the peers sent a RST segment.

I can't tell what I need to open as both HTTP and HTTPS are allowed.

Cheers

splattne
  • 28,348
  • 19
  • 97
  • 147
Stooie29
  • 31
  • 5

2 Answers2

1

to download updates using magento connect behind a proxy

you will have to edit file: /downloader/lib/Mage/HTTP/Client/curl.php

and after the line $this->_ch = curl_init();

you will need to add

$this->curlOption(CURLOPT_PROXY, “YourProxy:YourProxyPort");
$this->curlOption(CURLOPT_PROXYUSERPWD, “YourUser:YourPassword"); // if needed
Mark Henderson
  • 68,316
  • 31
  • 175
  • 255
Matias
  • 11
  • 1
1

I have no idea what "magento extensions" are, but if you're having problems communicating with the Internet on a host behind a firewall, regardless of the type of firewall, I'd recommend firing up a sniffer on the host and watching the outbound traffic. It's a lot easier, to me, than trying to grub around in firewall logs figuring out what's getting dropped. Wireshark, tcpdump, Network Monitor, etc, are your friends for this.

Evan Anderson
  • 141,071
  • 19
  • 191
  • 328
  • Seems to be this: http://www.magentocommerce.com/magento-connect MAGENTO - not MAGNETO :) – splattne Jul 07 '09 at 13:29
  • Problem is that it works no problem when connected to the internet. As soon as you connect to the LAN and behind ISA it fails. – Stooie29 Jul 07 '09 at 16:01
  • 1
    My opinion stands: You need to sniff the traffic and see what the application is trying to do. Anything else is just random speculation. – Evan Anderson Jul 07 '09 at 16:15
  • HI, I have ran wireshark as I have tried to install the extension. It is trying to connect to connect.magentocommerce.com (208.69.123.164) on port 80. All of which is open on the firewall. the second packet is a ICMP Destination unreachable. – Stooie29 Jul 08 '09 at 10:30
  • 1
    You're getting an ICMP destination unreachable from where? Does the TCP connection to 208.69.123.164 ever actually get started (i.e. you see the SYN from your box to the 208.x.x.x address, a SYN-ACK coming back from the 208.x.x.x address, and an ACK from your box back to the 208.x.x.x address)? – Evan Anderson Jul 08 '09 at 13:07
  • It is from 208.69.123.164 (magento) I do see a syn from the pc but it is then imeadiatly followed by the ICMP destination unreachable. – Stooie29 Jul 08 '09 at 14:56
  • 1
    That sure sounds like your firewall is closing the TCP connection (by spoofing the source address of the 208.x.x.x server). Can you browse web sites on this machine? I'm guessing not. You're probably going to need to have the ISA client installed on that machine or you're going to need to manually specify an HTTP proxy and credentials. – Evan Anderson Jul 08 '09 at 15:00
  • I have tried with the fw client and i can broswe the web from the machine no problem. I realy am pulling my hair out – Stooie29 Jul 08 '09 at 15:19
  • So, you can access web sites. What happens when you try to access the URL that the magento software is accessing with a browser? What security context is the magento software running as? – Evan Anderson Jul 08 '09 at 15:25
  • HTTP and I can browse to the site although it does re-direct my session to the home page. – Stooie29 Jul 08 '09 at 15:39
  • Just plugged the laptop direct into the internet and it works so it is defiantly something to do with the firewals. :( Thanks for the help BTW – Stooie29 Jul 08 '09 at 15:53
  • 1
    We're getting quite the convo going here, eh? What security context is the software using when it tries to hit this URL? Is this some program running as a service? My guess is that the firewall has rules based on who the user is performing the access, and you're running the installation program from the SYSTEM context or such, which isn't being permitted access. Alternatively, it could be that your browser is using an HTTP proxy but the installlation software isn't. – Evan Anderson Jul 08 '09 at 16:11
  • It doesn't run as a service. Basicaly you add a link in to the website which then contacts magento to download the extension. We are using ISA 2004 as a proxy server but I can't see why the program can't communicate through it. – Stooie29 Jul 09 '09 at 09:52