Jackie - thanks. Yes, adding those lines do work for me - we can now see the CAPTCHA image via Ezproxy.
Stephen
From: Jackie Chen [mailto:***@aut.ac.nz]
Sent: 28 September 2014 21:30
To: EZProxy discussion list
Subject: {!!! SPAM ???} RE: [ezproxy] Wiley and Captcha
Hi Jimm and Graham,
If you don't have individual stanza for Google, you can just include the following in your Wiley stanza. It works for us.
HJ www.google.com<http://www.google.com>
Find www.google.com<http://www.google.com>
Replace ^pwww.google.com^
It will proxy this URL http://www.google.com/recaptcha where the images are coming from.
Best Regards
Jackie
From: Hewitt, Vivien [mailto:***@health.wa.gov.au]
Sent: Saturday, 27 September 2014 01:21
To: EZProxy discussion list
Subject: {Spam?} RE: [ezproxy] Wiley and Captcha
I'm sorry to hear that this is not a solution for you (Jim and Graham). We proxy by hostname here.
It's possible that lines in other stanzas in our config are allowing the captcha image to display in our environment. I can see in the header information that the captcha calls are from the proxied version of www.google.com<http://www.google.com>
GET /recaptcha/api/js/recaptcha_ajax.js HTTP/1.1
Accept: */*
Referer: http://onlinelibrary.wiley.com.smhslibresources.health.wa.gov.au/doi/10.1111/acem.12366/abstract
Accept-Language: en-au
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.1; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.google.com.smhslibresources.health.wa.gov.au<http://www.google.com.smhslibresources.health.wa.gov.au>
Connection: Keep-Alive
Cookie: _ga=GA1.3.184843557.1410142262; __utmc=142982455; __utma=142982455.184843557.1410142262.1411600287.1411600287.1; __utmz=142982455.1411600287.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); _vis_opt_s=1%7C; __gads=ID=cdd2765b7aef9402:T=1411293106:S=ALNI_MZIGHiFGBdiKJScg4bS-CtPO_BnhQ; ezproxy=xoTeDcmtDB0JYvo
X-NovINet: v1.2
GET /recaptcha/api/challenge?k=6Lckmr8SAAAAAHgZ9WTMvqruL5-af4GtVAYJe9g5&ajax=1&cachestop=0.10344029821185319 HTTP/1.1
Accept: */*
Referer: http://onlinelibrary.wiley.com.smhslibresources.health.wa.gov.au/doi/10.1111/acem.12366/abstract
Accept-Language: en-au
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.1; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.google.com.smhslibresources.health.wa.gov.au<http://www.google.com.smhslibresources.health.wa.gov.au>
Connection: Keep-Alive
Cookie: _ga=GA1.3.184843557.1410142262; __utmc=142982455; __utma=142982455.184843557.1410142262.1411600287.1411600287.1; __utmz=142982455.1411600287.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); _vis_opt_s=1%7C; __gads=ID=cdd2765b7aef9402:T=1411293106:S=ALNI_MZIGHiFGBdiKJScg4bS-CtPO_BnhQ; ezproxy=xoTeDcmtDB0JYvo
X-NovINet: v1.2
Because we use a Google Custom Search on some of our web pages we do also have an entry for google.com in our config file. Could that be why it is working for us?
Title Google Custom Search
URL http://www.google.com/coop/cse
H gmodules.com
HJ www.dropbox.com<http://www.dropbox.com>
DJ dropbox.com
DJ gmodules.com
DJ google.com
Find http:\x2F\x2Fwww.google.com
Replace http:\x2F\x2F^pwww.google.com^
Find www.google.com<http://www.google.com>
Replace ^pwww.google.com^
Regards,
Vivien
________________________________
From: Jimm Wetherbee [mailto:***@wingate.edu]
Sent: Friday, 26 September 2014 20:56
To: EZProxy discussion list
Subject: Re: [ezproxy] Wiley and Captcha
No joy here either.
--jimm
On Fri, Sep 26, 2014 at 8:11 AM, Jimm Wetherbee <***@wingate.edu<mailto:***@wingate.edu>> wrote:
Vivien,
Thanks, BTW, do you proxy by host or port?
--jimm
On Thu, Sep 25, 2014 at 7:33 PM, Hewitt, Vivien <***@health.wa.gov.au<mailto:***@health.wa.gov.au>> wrote:
I've just had a chance to look at the Wiley Captcha issue reported by some libraries earlier this week.
We don't seem to have a problem with the "Email link to this article" function (works for us in IE8, Chrome & Firefox). The link is emailed successfully (but unfortunately the email does not contain the proxied version of the link):
The following link to content from Wiley Online Library has been sent to you by Vivien Hewitt ***@health.wa.gov.au<mailto:***@health.wa.gov.au>
ARTICLE: Effects of Emergency Department Expansion on Emergency Department Patient Flow Academic Emergency Medicine Bryn E. Mumma James Y. McCue Chin\Shang Li James F. Holmes
DOI: 10.1111/acem.12366
http://onlinelibrary.wiley.com/doi/10.1111/acem.12366/abstract
[cid:***@01CFDBFF.642C4500][cid:***@01CFDBFF.642C4500]
I have attached a copy of the ieHTTPHeaders information in case this helps diagnose the problem some libraries are experiencing.
The ieHTTPHeader information indicates that the cloudfront, deepdyve, grapeshot, krxd etc lines may be the ones that are required for Captcha to proxy successfully:
$a=1%7Cclick%20on%20%22E-mail%20Link%20to%20this%20Article%22%7C-%7Cclick%7C1411684857800%7C1411684860050%7C627$fId=484850643_231$rId=RID_649686942$rpId=-2007516328$domR=1411684852784$3p=wiley.grapeshot.co.uk.smhslibresources.health.wa.gov.au<http://wiley.grapeshot.co.uk.smhslibresources.health.wa.gov.au>%7C4%7C1%7C0%7C0%7C0%7C1%7C0%7C63_438%7C375%7C375%7C375%7C%7C0%7C0%7C0%3Bonlinelibrarystatic.wiley.com.smhslibresources.health.wa.gov.au<http://3Bonlinelibrarystatic.wiley.com.smhslibresources.health.wa.gov.au>%7C6%7C3%7C0%7C0%7C0%7C3%7C0%7C500_500_2141_2141%7C0%7C0%7C0%7C%7C0%7C0%7C0%7C24%7C0%7C0%7C0%7C24%7C0%7C500_500_2141_2141%7C0%7C0%7C0%7C%7C0%7C0%7C0%3Bcdn.krxd.net<http://3Bcdn.krxd.net>%7C4%7C1%7C0%7C0%7C0%7C1%7C0%7C500_500%7C0%7C0%7C0%7C%7C0%7C0%7C0%3Bad.uk.doubleclick.net.smhslibresources.health.wa.gov.au<http://3Bad.uk.doubleclick.net.smhslibresources.health.wa.gov.au>%7C4%7C3%7C0%7C0%7C0%7C3%7C0%7C500_875_906_1250_1281_1641%7C359%7C344%7C375%7C%7C0%7C0%7C0%3Bpagead2.googlesyndication.com.smhslibresources.health.wa.gov.au<http://3Bpagead2.googlesyndication.com.smhslibresources.health.wa.gov.au>%7C2%7C2%7C0%7C0%7C0%7C2%7C0%7C906_906_1281_7297%7C3008%7C0%7C6016%7C%7C0%7C0%7C0%3Bbeacon.krxd.net<http://3Bbeacon.krxd.net>%7C4%7C1%7C0%7C0%7C0%7C1%7C0%7C906_1391%7C485%7C485%7C485%7C%7C0%7C0%7C0%3Bapiservices.krxd.net<http://3Bapiservices.krxd.net>%7C4%7C1%7C0%7C0%7C0%7C1%7C0%7C2141_2141%7C0%7C0%7C0%7C%7C0%7C0%7C0%3Bd1bxh8uas1mnw7-cloudfront-net.smhslibresources.health.wa.gov.au<http://3Bd1bxh8uas1mnw7-cloudfront-net.smhslibresources.health.wa.gov.au>%7C4%7C2%7C0%7C0%7C0%7C2%7C0%7C2141_2360_2406_3032%7C422%7C219%7C626%7C%7C0%7C0%7C0%3Bwww.deepdyve.com.smhslibresources.health.wa.gov.au<http://3Bwww.deepdyve.com.smhslibresources.health.wa.gov.au>%7C4%7C1%7C0%7C0%7C0%7C1%7C0%7C2141_2328%7C187%7C187%7C187%7C%7C0%7C0%7C0%3Bapi-altmetric-com.smhslibresources.health.wa.gov.au<http://3Bapi-altmetric-com.smhslibresources.health.wa.gov.au>%7C4%7C1%7C0%7C0%7C0%7C1%7C0%7C3047_3438%7C391%7C391%7C391%7C%7C0%7C0%7C0%3Bd1uo4w7k31k5mn-cloudfront-net.smhslibresources.health.wa.gov.au<http://3Bd1uo4w7k31k5mn-cloudfront-net.smhslibresources.health.wa.gov.au>%7C2%7C1%7C0%7C0%7C0%7C1%7C0%7C3485_3860%7C375%7C375%7C375%7C%7C0%7C0%7C0$w=2004$h=712$time=1411684860065
We are using the following expanded Wiley EZproxy stanza which is quite different from the OCLC stanza
We also have the HTTPHeader X-Requested-With lines towards the top of the config file (but we do not use the Option X-Forwarded-For line in our Ezproxy config at all).
# Allow AJAX requests
HTTPHeader X-Requested-With
Title Wiley Online Library
URL http://onlinelibrary.wiley.com/
H a.vimeocdn.com<http://a.vimeocdn.com>
H a2a.lockerz.com<http://a2a.lockerz.com>
H beacon.krxd.net<http://beacon.krxd.net>
H MailScanner has detected definite fraud in the website at "bitly.com". Do not trust this website: MailScanner has detected definite fraud in the website at "bitly.com". Do not trust this website: bitly.com<http://bitly.com>
H cronos3.wiley.com<http://cronos3.wiley.com>
H doi.wiley.com<http://doi.wiley.com>
HJ feedburner.google.com<http://feedburner.google.com>
H mddb.wiley.com<http://mddb.wiley.com>
H olprodfe02.wiley.com<http://olprodfe02.wiley.com>
H onlinelibrarystatic.wiley.com<http://onlinelibrarystatic.wiley.com>
H player.vimeo.com<http://player.vimeo.com>
H twitstamp.com<http://twitstamp.com>
H wiley.grapeshot.co.uk<http://wiley.grapeshot.co.uk>
HJ wileypublishing.112.2o7.net<http://wileypublishing.112.2o7.net>
H www.deepdyve.com<http://www.deepdyve.com>
H www.evidencebasedseries.com<http://www.evidencebasedseries.com>
H www.mrw.interscience.wiley.com<http://www.mrw.interscience.wiley.com>
H www.yada-yada.co.uk<http://www.yada-yada.co.uk>
H www3.interscience.wiley.com<http://www3.interscience.wiley.com>
DJ 112.2o7.net<http://112.2o7.net>
DJ MailScanner has detected definite fraud in the website at "bitly.com". Do not trust this website: MailScanner has detected definite fraud in the website at "bitly.com". Do not trust this website: bitly.com<http://bitly.com>
DJ cloudfront.net<http://cloudfront.net>
DJ deepdyve.com<http://deepdyve.com>
DJ evidencebasedseries.com<http://evidencebasedseries.com>
DJ krxd.net<http://krxd.net>
DJ lockerz.com<http://lockerz.com>
DJ twitstamp.com<http://twitstamp.com>
DJ vimeo.com<http://vimeo.com>
DJ vimeocdn.com<http://vimeocdn.com>
DJ wiley.com<http://wiley.com>
DJ yada-yada.co.uk<http://yada-yada.co.uk>
Find feedburner.google.com<http://feedburner.google.com>
Replace ^pfeedburner.google.com<http://pfeedburner.google.com>^
Find src="http://download.interscience.wiley.comimages/
Replace src="http://download.interscience.wiley.com/images/
Find player.vimeo.com<http://player.vimeo.com>
Replace ^pplayer.vimeo.com<http://pplayer.vimeo.com>^
Find a.vimeocdn.com<http://a.vimeocdn.com>
Replace ^pa.vimeocdn.com<http://pa.vimeocdn.com>^
Find b.vimeocdn.com<http://b.vimeocdn.com>
Replace ^pb.vimeocdn.com<http://pb.vimeocdn.com>^
Find a2a.lockerz.com<http://a2a.lockerz.com>
Replace ^pa2a.lockerz.com<http://pa2a.lockerz.com>^
Find www.adobetag.com<http://www.adobetag.com>
Replace ^pwww.adobetag.com<http://pwww.adobetag.com>^
Find beacon.krxd.net<http://beacon.krxd.net>
Replace ^pbeacon.krxd.net<http://pbeacon.krxd.net>^
Find cdn.krxd.net<http://cdn.krxd.net>
Replace ^pcdn.krxd.net<http://pcdn.krxd.net>^
Hope this helps!
Vivien
Vivien Hewitt | Electronic Services Librarian
Library & Web Services | Fremantle Hospital and Health Service
2nd Floor T Block, Alma Street, FREMANTLE WA 6169
T: +61 8 9431 2205<tel:%2B61%208%209431%202205> | F: +61 8 9431 2298<tel:%2B61%208%209431%202298> | M: 0421504747
E: ***@health.wa.gov.au<mailto:***@health.wa.gov.au>
southmetropolitan.health.wa.gov.au/library<http://southmetropolitan.health.wa.gov.au/library>
Delivering a Healthy WA
________________________________
From: Jimm Wetherbee [mailto:***@wingate.edu<mailto:***@wingate.edu>]
Sent: Wednesday, 24 September 2014 23:30
To: EZProxy discussion list
Subject: Re: [ezproxy] Wiley and Captcha
Stephen,
No, I have not resolved this, but thanks to you I know more than I once did.
--jimm
On Wed, Sep 24, 2014 at 10:11 AM, Graham, Stephen <***@herts.ac.uk<mailto:***@herts.ac.uk>> wrote:
Hi Jimm C did you resolve this? We can replicate this problem and it looks like the CAPTCHA image is coming from www.google.com<http://www.google.com>, and that Google are checking the referring URL. Because the referer is http://onlinelibrary.wiley.com.ezproxy.herts.ac.uk (in our case) and not http://onlinelibrary.wiley.com, then Google is throwing an error.
When you click on the "Email link to this article" link, a call to Google is made e.g.
http://www.google.com/recaptcha/api/challenge?k=6Lckmr8SAAAAAHgZ9WTMvqruL5-af4GtVAYJe9g5&ajax=1&cachestop=0.4136316056272433
, and the response I am seeing is:
var RecaptchaState = {'programming_error' : 'Input error: Invalid referer'};
It might be possible to change this using a find/replace or another Ezproxy directive, but I can't get it to work. (if indeed this is the actual problem!)
Stephen
From: Jimm Wetherbee [mailto:***@wingate.edu<mailto:***@wingate.edu>]
Sent: 22 September 2014 20:14
To: EZProxy discussion list
Subject: [ezproxy] Wiley and Captcha
When users attempt to to e-mail a link, the request form includes a CAPTCHA screen. However, what the see is the following:
Input error: c: Invalid version number for captcha challenge token. k: Format of site key was invalid
The CAPTCHA is correct when not using EZProxy.
The stanza looks like the latest recommended by OCLC
HTTPHeader X-Requested-With
Option X-Forwarded-For
Cookie theproxy=ezproxy; domain=.onlinelibrary.wiley.com<http://onlinelibrary.wiley.com>
T Wiley Online
U http://onlinelibrary.wiley.com
D wiley.com<http://wiley.com>
Option NoX-Forwarded-For
So, I am wondering whether the problem is with the stanza or is it elsewhere.
--jimm
--
You are currently subscribed to ezproxy as: ***@herts.ac.uk<mailto:***@herts.ac.uk>.
To unsubscribe, send request to ***@itec.suny.edu<mailto:***@itec.suny.edu>
You are currently subscribed to ezproxy as: ***@wingate.edu<mailto:***@wingate.edu>.
To unsubscribe, send request to ***@itec.suny.edu<mailto:***@itec.suny.edu>
--
You are currently subscribed to ezproxy as: ***@health.wa.gov.au<mailto:***@health.wa.gov.au>.
To unsubscribe, send request to ***@itec.suny.edu<mailto:***@itec.suny.edu>
You are currently subscribed to ezproxy as: ***@wingate.edu<mailto:***@wingate.edu>.
To unsubscribe, send request to ***@itec.suny.edu<mailto:***@itec.suny.edu>
--
You are currently subscribed to ezproxy as: ***@wingate.edu<mailto:***@wingate.edu>.
To unsubscribe, send request to ***@itec.suny.edu<mailto:***@itec.suny.edu>
--
[http://library.wingate.edu/images/signature01.jpg]
You are currently subscribed to ezproxy as: ***@health.wa.gov.au<mailto:***@health.wa.gov.au>.
To unsubscribe, send request to ***@itec.suny.edu<mailto:***@itec.suny.edu>
You are currently subscribed to ezproxy as: ***@aut.ac.nz<mailto:***@aut.ac.nz>.
To unsubscribe, send request to ***@itec.suny.edu<mailto:***@itec.suny.edu>
You are currently subscribed to ezproxy as: ***@herts.ac.uk<mailto:***@herts.ac.uk>.
To unsubscribe, send request to ***@itec.suny.edu<mailto:***@itec.suny.edu>
---
You are currently subscribed to ezproxy as: gee-***@m.gmane.org.
To unsubscribe, send request to ***@itec.suny.edu