0003432: HAVP => no youtube videos from iphone & ipad

(0005478)
baldy (reporter)
2011-01-15 13:26
edited on: 2011-01-15 13:31

Hi Ardit,

the option "SKIPMIME image/* video/* audio/*" should fix the problem.

Option should be added to /etc/havp/havp.conf
Not sure whether the file will be overwritten when the process restarts.

http://www.ipcops.com/phpbb3/viewtopic.php?f=7&t=14274 [^]

regards,

Baldy

(0005479)
ardit-endian (developer)
2011-01-17 08:31

Hi Baldy,

Actually, there is an Mime Type option in Access Policy rules but it is applicable only with "deny access"

We should try putting SKIPMIME image/* video/* audio/* to havp.conf.tmpl (this modification is permanent) and see if this solve the problem.

nice catch,

I hope that there will be a fix included in the next update.

Regards,
Ardit.

(0005480)
ardit-endian (developer)
2011-01-17 09:55
edited on: 2011-01-17 09:59

NOTE:

Option not supported in havp 0.90 (currently installed in 2.4 enterprise), option available only with 0.92 and up*

Please note:

update also;
dansguardian,
squid,
clamav

(0005877)
diwoda (reporter)
2011-03-08 11:57

Sorry, but this bug is NOT minor at all !

Especially not in Hotspot Inviroments but also in everydays life! Just think about the immense number of iphone and ipad users!

Kindly request a FAST solution! (bypassing the proxy is no option because it is not possible to enter each MAC or IP Address manually...)

(0006342)
timboau (reporter)
2011-05-16 04:59

Hi,
Has any progress been made with this.

I'm looking at deploying Endian as a firewall/proxy and everything was working perfectly until I deployed it and users started complaining about videos not streaming. It appears they are Flash videos that are not working.
Unfortunately this will be a deal breaker for me and I will have to look elsewhere. I'm happy to exclude the complete site from the proxy if necessary however that didnt seem to make any difference.

Could it be anything to do with RTMP Protocol?

(0006515)
baldy (reporter)
2011-05-26 23:00

Hi timboau,

Can you test this package and post back the results ?

From a ssh session: curl bugfixes.endian.com/havp-clam/install | sh

I have been testing this package for different reasons, but should fix your problem in combination with the /SKIPMIME option above.

Regards,

Klaas-Jan

(0006558)
davezeking (reporter)
2011-06-02 10:18

Hi baldy,

I've been having the same issue with Youtube and HTML5 videos on the iPad, I tried your fixes (the update and SKIPMIME directive), this still didn't fix the issue.

After hours of messing around I've worked out that the RANGE command needs to be supported by the proxy in order to use pseudo HTTP Streaming on iOS.

If you add the following line to /etc/havp/havp.conf.tmpl:

RANGE true

And then save your changes via the web interface so the template is written into the live config file you should find that both the YouTube app and HTML5 videos in Safari now work.

In the end I commented out the SKIPMIME directive as this didn't seem to help and also seems less secure.

Regards,

Dave.

(0007767)
luca-endian (developer)
2012-03-27 12:08

rpm -q havp
havp-0.92a-2.endian15

root@stan:/etc/havp # cat havp.conf | grep SK
SKIPMIME image/* video/* audio/*

Doesn't fix the problem..

(0007768)
luca-endian (developer)
2012-03-27 13:11

rpm -q havp
havp-0.92a-2.endian15

root@stan:/etc/havp # cat havp.conf | grep RANGE
RANGE true

youtube and appstore on iphone works

(0007906)
fqureshi (reporter)
2012-06-07 22:10

I was facing the same issue. First I passsed the argument of "RANGE true" it didn't work. Then I checked the version of havp which is havp-0.92a-2.endian15.

Then I added SKIPMIME image/* video/* audio/*
everything is working as desired. Thus I am passing two arguments in havp.config.tmpl file

RANGE true
SKIPMIME image/* video/* audio/*

(0008007)
Lyve (reporter)
2012-08-11 16:07

Thanks @fqureshi this fixed the problem for me, too.

(0008008)
ardit-endian (developer)
2012-08-13 08:13

@everyone,

yes the SKIPMIME will fix the issue but will also not scann any image, picture, audio for viruses.

Don't use this setting in critical environments where you rely on the antivirus for protecting your data.

(0008391)
herbert-endian (developer)
2013-03-11 08:41

Hi Guys,

I have a customer with the same issue on all of his Machines.
I gave him the workaroung with the information from Ardit, that he should pay attention.
When would this Bug be fixed?

Please let me know.
Cheers.

Herbert

Issue History
Date Modified	Username	Field	Change
2011-01-14 16:06	ardit-endian	New Issue
2011-01-14 16:06	ardit-endian	Tag Attached: purple
2011-01-14 16:55	ardit-endian	Customer Occurencies	=> 1
2011-01-15 13:26	baldy	Note Added: 0005478
2011-01-15 13:27	baldy	Note Edited: 0005478
2011-01-15 13:31	baldy	Note Edited: 0005478
2011-01-17 08:31	ardit-endian	Note Added: 0005479
2011-01-17 09:55	ardit-endian	Note Added: 0005480
2011-01-17 09:59	ardit-endian	Note Edited: 0005480
2011-02-07 08:29	ra-endian	Assigned To	=> peter-endian
2011-02-07 08:29	ra-endian	Status	new => confirmed
2011-02-10 14:15	ra-endian	Category	Other Services => Proxy HTTP
2011-02-11 08:43	ardit-endian	Customer Occurencies	1 => 4-6
2011-02-18 14:26	ra-endian	Severity	major => minor
2011-03-08 11:57	diwoda	Note Added: 0005877
2011-05-16 04:59	timboau	Note Added: 0006342
2011-05-24 12:28	ardit-endian	Severity	minor => major
2011-05-26 23:00	baldy	Note Added: 0006515
2011-06-02 10:18	davezeking	Note Added: 0006558
2012-03-27 12:08	luca-endian	Note Added: 0007767
2012-03-27 13:11	luca-endian	Note Added: 0007768
2012-06-07 22:10	fqureshi	Note Added: 0007906
2012-08-11 16:07	Lyve	Note Added: 0008007
2012-08-13 08:13	ardit-endian	Note Added: 0008008
2012-11-28 14:22	Anonymous	Status	confirmed => feedback
2013-03-11 08:41	herbert-endian	Note Added: 0008391

Notes
(0005478) baldy (reporter) 2011-01-15 13:26 edited on: 2011-01-15 13:31	Hi Ardit, the option "SKIPMIME image/* video/* audio/*" should fix the problem. Option should be added to /etc/havp/havp.conf Not sure whether the file will be overwritten when the process restarts. http://www.ipcops.com/phpbb3/viewtopic.php?f=7&t=14274 [^] regards, Baldy

(0005479) ardit-endian (developer) 2011-01-17 08:31	Hi Baldy, Actually, there is an Mime Type option in Access Policy rules but it is applicable only with "deny access" We should try putting SKIPMIME image/* video/* audio/* to havp.conf.tmpl (this modification is permanent) and see if this solve the problem. nice catch, I hope that there will be a fix included in the next update. Regards, Ardit.

(0005480) ardit-endian (developer) 2011-01-17 09:55 edited on: 2011-01-17 09:59	NOTE: Option not supported in havp 0.90 (currently installed in 2.4 enterprise), option available only with 0.92 and up* Please note: update also; dansguardian, squid, clamav

(0005877) diwoda (reporter) 2011-03-08 11:57	Sorry, but this bug is NOT minor at all ! Especially not in Hotspot Inviroments but also in everydays life! Just think about the immense number of iphone and ipad users! Kindly request a FAST solution! (bypassing the proxy is no option because it is not possible to enter each MAC or IP Address manually...)

(0006342) timboau (reporter) 2011-05-16 04:59	Hi, Has any progress been made with this. I'm looking at deploying Endian as a firewall/proxy and everything was working perfectly until I deployed it and users started complaining about videos not streaming. It appears they are Flash videos that are not working. Unfortunately this will be a deal breaker for me and I will have to look elsewhere. I'm happy to exclude the complete site from the proxy if necessary however that didnt seem to make any difference. Could it be anything to do with RTMP Protocol?

(0006515) baldy (reporter) 2011-05-26 23:00	Hi timboau, Can you test this package and post back the results ? From a ssh session: curl bugfixes.endian.com/havp-clam/install \| sh I have been testing this package for different reasons, but should fix your problem in combination with the /SKIPMIME option above. Regards, Klaas-Jan

(0006558) davezeking (reporter) 2011-06-02 10:18	Hi baldy, I've been having the same issue with Youtube and HTML5 videos on the iPad, I tried your fixes (the update and SKIPMIME directive), this still didn't fix the issue. After hours of messing around I've worked out that the RANGE command needs to be supported by the proxy in order to use pseudo HTTP Streaming on iOS. If you add the following line to /etc/havp/havp.conf.tmpl: RANGE true And then save your changes via the web interface so the template is written into the live config file you should find that both the YouTube app and HTML5 videos in Safari now work. In the end I commented out the SKIPMIME directive as this didn't seem to help and also seems less secure. Regards, Dave.

(0007767) luca-endian (developer) 2012-03-27 12:08	rpm -q havp havp-0.92a-2.endian15 root@stan:/etc/havp # cat havp.conf \| grep SK SKIPMIME image/* video/* audio/* Doesn't fix the problem..

(0007768) luca-endian (developer) 2012-03-27 13:11	rpm -q havp havp-0.92a-2.endian15 root@stan:/etc/havp # cat havp.conf \| grep RANGE RANGE true youtube and appstore on iphone works

(0007906) fqureshi (reporter) 2012-06-07 22:10	I was facing the same issue. First I passsed the argument of "RANGE true" it didn't work. Then I checked the version of havp which is havp-0.92a-2.endian15. Then I added SKIPMIME image/* video/* audio/* everything is working as desired. Thus I am passing two arguments in havp.config.tmpl file RANGE true SKIPMIME image/* video/* audio/*

(0008007) Lyve (reporter) 2012-08-11 16:07	Thanks @fqureshi this fixed the problem for me, too.

(0008008) ardit-endian (developer) 2012-08-13 08:13	@everyone, yes the SKIPMIME will fix the issue but will also not scann any image, picture, audio for viruses. Don't use this setting in critical environments where you rely on the antivirus for protecting your data.

(0008391) herbert-endian (developer) 2013-03-11 08:41	Hi Guys, I have a customer with the same issue on all of his Machines. I gave him the workaroung with the information from Ardit, that he should pay attention. When would this Bug be fixed? Please let me know. Cheers. Herbert

Relationships

Please see now our new Bugtracker system: JIRA