Campbell, Jeffrey D
2014-10-03 19:53:18 UTC
Here is an oddity
.
On my development server running Ezproxy 5.7.42 I am able to access image files on ancestry institution.com but on my production server running Ezproxy 5.7.42 I cannot. I have the "MimeFilter application/json .* javascript set on both machines. Ive run a div on the two different config.txt files and other than a few resources that Ive commented out in the dev config.txt file everything else is the same. Adding the MimeFilter variable worked briefly on both servers until I upgraded to the last version of Ezproxy and when I tested 5.7.42 on the dev instance I was excited that it worked there.
Im at a loss of what could be wrong. Any other suggestions?
Jeff Campbell
Head of Library Management Systems
236 Davis Library, CB#3946
UNC Chapel Hill
919-962-3883
From: Brian A Helstien <***@usc.edu<mailto:***@usc.edu>>
Reply-To: "***@ls.suny.edu<mailto:***@ls.suny.edu>" <***@ls.suny.edu<mailto:***@ls.suny.edu>>
Date: Friday, October 3, 2014 at 11:53 AM
To: EZProxy discussion list <***@ls.suny.edu<mailto:***@ls.suny.edu>>
Subject: RE:[ezproxy] Audit oddities
James,
You might check to see if that is a VPN address locally. The session key reports that it was attempting to go to
China.
Brian A. Helstien, SISD, MLS,
Director, Special Technologies Initiatives,
Library IT, University Libraries, x06913
University of Southern California, (213) 740-6913
Los Angeles, California, 90089 ***@usc.edu<mailto:***@usc.edu>
Information is independent of media or format
From: McGranahan, Jamen [mailto:***@vanderbilt.edu]
Sent: Friday, October 03, 2014 8:31 AM
To: EZProxy discussion list
Subject: [ezproxy] Audit oddities
Using EZproxy 5.7.42 GA on RedHat 5:
Was wondering if someone can explain this to me because I dont understand what our Audit log is telling us:
Date/Time <http://proxy.library.vanderbilt.edu/audit?date=30&anyall=all&field1=event&cond1=c&value1=&field2=username&cond2=c&value2=&field3=ip&cond3=c&value3=&field4=session&cond4=c&value4=WmdxPAk0MErxTXb&search=Search>
Event <http://proxy.library.vanderbilt.edu/audit?date=30&anyall=all&field1=event&cond1=c&value1=&field2=username&cond2=c&value2=&field3=ip&cond3=c&value3=&field4=session&cond4=c&value4=WmdxPAk0MErxTXb&search=Search>
IP <http://proxy.library.vanderbilt.edu/audit?date=30&anyall=all&field1=event&cond1=c&value1=&field2=username&cond2=c&value2=&field3=ip&cond3=c&value3=&field4=session&cond4=c&value4=WmdxPAk0MErxTXb&search=Search>
Location <http://proxy.library.vanderbilt.edu/audit?date=30&anyall=all&field1=event&cond1=c&value1=&field2=username&cond2=c&value2=&field3=ip&cond3=c&value3=&field4=session&cond4=c&value4=WmdxPAk0MErxTXb&search=Search>
Username <http://proxy.library.vanderbilt.edu/audit?date=30&anyall=all&field1=event&cond1=c&value1=&field2=username&cond2=c&value2=&field3=ip&cond3=c&value3=&field4=session&cond4=c&value4=WmdxPAk0MErxTXb&search=Search>
Session <http://proxy.library.vanderbilt.edu/audit?date=30&anyall=all&field1=event&cond1=c&value1=&field2=username&cond2=c&value2=&field3=ip&cond3=c&value3=&field4=session&cond4=c&value4=WmdxPAk0MErxTXb&search=Search>
Other <http://proxy.library.vanderbilt.edu/audit?date=30&anyall=all&field1=event&cond1=c&value1=&field2=username&cond2=c&value2=&field3=ip&cond3=c&value3=&field4=session&cond4=c&value4=WmdxPAk0MErxTXb&search=Search>
13:34:06
Login.Success
10.66.215.97
US TN Vanderbilt<http://proxy.library.vanderbilt.edu/ip?details=10.66.215.97>
auto-10.66.215.97
WmdxPAk0MErxTXb
Groups Default AllAlumni
13:34:09
BlockCountryChange
10.66.215.97
US TN Vanderbilt<http://proxy.library.vanderbilt.edu/ip?details=10.66.215.97>
auto
WmdxPAk0MErxTXb
Session country CN
I understand the Login.Success that is an AutoIP range, but I dont understand why 3 seconds later, there was a block on that same IP because it thought it changed countries?? How can that be?
Jamen McGranahan
Systems Services Librarian
Vanderbilt University LIbrary
Central Library
Room 811
419 21st Avenue South
Nashville, TN 37214
You are currently subscribed to ezproxy as: ***@usc.edu<mailto:***@usc.edu>.
To unsubscribe, send request to ***@itec.suny.edu<mailto:***@itec.suny.edu>
You are currently subscribed to ezproxy as: ***@unc.edu<mailto:***@unc.edu>.
To unsubscribe, send request to ***@itec.suny.edu<mailto:***@itec.suny.edu>
---
You are currently subscribed to ezproxy as: gee-***@m.gmane.org.
To unsubscribe, send request to ***@itec.suny.edu
On my development server running Ezproxy 5.7.42 I am able to access image files on ancestry institution.com but on my production server running Ezproxy 5.7.42 I cannot. I have the "MimeFilter application/json .* javascript set on both machines. Ive run a div on the two different config.txt files and other than a few resources that Ive commented out in the dev config.txt file everything else is the same. Adding the MimeFilter variable worked briefly on both servers until I upgraded to the last version of Ezproxy and when I tested 5.7.42 on the dev instance I was excited that it worked there.
Im at a loss of what could be wrong. Any other suggestions?
Jeff Campbell
Head of Library Management Systems
236 Davis Library, CB#3946
UNC Chapel Hill
919-962-3883
From: Brian A Helstien <***@usc.edu<mailto:***@usc.edu>>
Reply-To: "***@ls.suny.edu<mailto:***@ls.suny.edu>" <***@ls.suny.edu<mailto:***@ls.suny.edu>>
Date: Friday, October 3, 2014 at 11:53 AM
To: EZProxy discussion list <***@ls.suny.edu<mailto:***@ls.suny.edu>>
Subject: RE:[ezproxy] Audit oddities
James,
You might check to see if that is a VPN address locally. The session key reports that it was attempting to go to
China.
Brian A. Helstien, SISD, MLS,
Director, Special Technologies Initiatives,
Library IT, University Libraries, x06913
University of Southern California, (213) 740-6913
Los Angeles, California, 90089 ***@usc.edu<mailto:***@usc.edu>
Information is independent of media or format
From: McGranahan, Jamen [mailto:***@vanderbilt.edu]
Sent: Friday, October 03, 2014 8:31 AM
To: EZProxy discussion list
Subject: [ezproxy] Audit oddities
Using EZproxy 5.7.42 GA on RedHat 5:
Was wondering if someone can explain this to me because I dont understand what our Audit log is telling us:
Date/Time <http://proxy.library.vanderbilt.edu/audit?date=30&anyall=all&field1=event&cond1=c&value1=&field2=username&cond2=c&value2=&field3=ip&cond3=c&value3=&field4=session&cond4=c&value4=WmdxPAk0MErxTXb&search=Search>
Event <http://proxy.library.vanderbilt.edu/audit?date=30&anyall=all&field1=event&cond1=c&value1=&field2=username&cond2=c&value2=&field3=ip&cond3=c&value3=&field4=session&cond4=c&value4=WmdxPAk0MErxTXb&search=Search>
IP <http://proxy.library.vanderbilt.edu/audit?date=30&anyall=all&field1=event&cond1=c&value1=&field2=username&cond2=c&value2=&field3=ip&cond3=c&value3=&field4=session&cond4=c&value4=WmdxPAk0MErxTXb&search=Search>
Location <http://proxy.library.vanderbilt.edu/audit?date=30&anyall=all&field1=event&cond1=c&value1=&field2=username&cond2=c&value2=&field3=ip&cond3=c&value3=&field4=session&cond4=c&value4=WmdxPAk0MErxTXb&search=Search>
Username <http://proxy.library.vanderbilt.edu/audit?date=30&anyall=all&field1=event&cond1=c&value1=&field2=username&cond2=c&value2=&field3=ip&cond3=c&value3=&field4=session&cond4=c&value4=WmdxPAk0MErxTXb&search=Search>
Session <http://proxy.library.vanderbilt.edu/audit?date=30&anyall=all&field1=event&cond1=c&value1=&field2=username&cond2=c&value2=&field3=ip&cond3=c&value3=&field4=session&cond4=c&value4=WmdxPAk0MErxTXb&search=Search>
Other <http://proxy.library.vanderbilt.edu/audit?date=30&anyall=all&field1=event&cond1=c&value1=&field2=username&cond2=c&value2=&field3=ip&cond3=c&value3=&field4=session&cond4=c&value4=WmdxPAk0MErxTXb&search=Search>
13:34:06
Login.Success
10.66.215.97
US TN Vanderbilt<http://proxy.library.vanderbilt.edu/ip?details=10.66.215.97>
auto-10.66.215.97
WmdxPAk0MErxTXb
Groups Default AllAlumni
13:34:09
BlockCountryChange
10.66.215.97
US TN Vanderbilt<http://proxy.library.vanderbilt.edu/ip?details=10.66.215.97>
auto
WmdxPAk0MErxTXb
Session country CN
I understand the Login.Success that is an AutoIP range, but I dont understand why 3 seconds later, there was a block on that same IP because it thought it changed countries?? How can that be?
Jamen McGranahan
Systems Services Librarian
Vanderbilt University LIbrary
Central Library
Room 811
419 21st Avenue South
Nashville, TN 37214
You are currently subscribed to ezproxy as: ***@usc.edu<mailto:***@usc.edu>.
To unsubscribe, send request to ***@itec.suny.edu<mailto:***@itec.suny.edu>
You are currently subscribed to ezproxy as: ***@unc.edu<mailto:***@unc.edu>.
To unsubscribe, send request to ***@itec.suny.edu<mailto:***@itec.suny.edu>
---
You are currently subscribed to ezproxy as: gee-***@m.gmane.org.
To unsubscribe, send request to ***@itec.suny.edu