Ip-proxy long header error 400 (hotmail)

LatinSuD · Thu Jul 26, 2007 8:34 pm

I've been debugging a problem with a user that couldn't log into hotmail when using ip-proxy, it receives a 400 http proxy error.

With help of firefox's http-live-headers i could reproduce it on several places, and tested mikrotik versions 2.9.9, 2.9.19 and 2.9.43.
The request is about 4200 bytes long, if i cut at little less than 4096 then it works. I know it's huge, but it's happening for real.

This is the request (sorry for ultra long lines). I replaced some characters by "." for security reasons:

http://by133w.bay133.mail.live.com/mail/TodayLight.aspx?n=1368606487

GET /mail/TodayLight.aspx?n=1368606487 HTTP/1.1
Host: by133w.bay133.mail.live.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; es-ES; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.4
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: es-es,es;q=0.8,en-us;q=0.5,en;q=0.3
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Cookie: MUID=..............................4D; ANON=A=..............................FF&E=5ca&W=1; NAP=V=1.5&E=570&C=....................RX__..............................&W=1; ..........=; ..........=; PPLState=1; RPSTAuth=............................................................BYYLLLI+pw/..............................txWZV+..................................................lX8E+....................AyFSI/7m+..................................................8Zzk/..............................qjjljIVW+......................................................................hz4zjpT+..........Ttxx/3VnY4z/....................+..........OFq/H7eJndDS4/............................................................................................................../..........achXRpFC/iRrrF/............................../........................................FBP9GL+V/....................Ehz1+s8gkuvS/..........LWNAQ==; MSPAuth=......................................................................AI7wzjT7*JIC*..................................................pOO5fwII$; MSPProf=....................eaN!....................oAExxMPP!..........!..........................................................................................qYi!..........kqnZ!..........xba*........................................Sln4d!B9Rca*..............................Mca*..........vP1!..........................................................................................UiWwwpUck; MSNPPAuth=............................................................iBMNpAQfy*..........9!..............................m!........................................6N6FlGPbE*3!........................................e4O6GSxZl*..................................................................................................................................*............................................................g4nYZu!..........M*............................................................yjH5D7!..............................5!........................................KPFDj*....................HyVQm!..........IDnFDDSSx*..........2psH!..........AoRvH4y*....................ivNZg3!....................4NxyV!*............................................................; UIC=..........jiy6e4Q!............................................................*....................T6lf3!......................................................................ORSmsUZD!..................................................YRubWl!......................................................................Q$$; mt=........................................|..........4b70b1; KVC=11.10.0000.0115; KSC=....................!........................................5*W!!eLZEDW!..........GVH4xZq*........................................04ikC!..................................................2Purb3!........................................nYfgMxg3q!......................................................................l90Qo*..........................................................................................7R07D9oCl!..........*i!........................................dbg8cu!....................odC1i6P*EB4qD!*..............................qptQfHh7!......................................................................NgW*cO4I!....................G*..........K3SDf4ihd!P5PCcN*....................YhcbJPI7o*..............................BAv5ueWZj*S9U6CwM!................................................................................................................................................................dl9h!kqg6W!....................................................................................................G6MxRLZ*....................o!..........fSX4f*..........22C
Cache-Control: max-age=0

And this is the response:

HTTP/1.x 400 Bad Request
Content-Length: 103
Connection: close

Web-proxy seems not to suffer from this problem. Maybe ip-proxy needs to raise max http request lenght value ?
Thanks

Fri Jul 27, 2007 8:47 am

I've used default configuration for 'ip proxy' (2.9.44 version, web-proxy test enabled), I have not been able to reproduce any issues with login to HotMail. Could you provide your proxy configuration ? Is it posssible to login to HotMail without proxy enabled ?

LatinSuD · Fri Jul 27, 2007 11:42 am

I've used default configuration for 'ip proxy' (2.9.44 version, web-proxy test enabled), I have not been able to reproduce any issues with login to HotMail. Could you provide your proxy configuration ?
It is not related to web-proxy, but "ip-proxy".
I have a hotspot and user profiles have the "transparent proxy" feature enabled. I used to have a parent proxy on 127.0.0.1 and port 3128, i tried with or without it, no difference.
I also tried redirecting a normal user (from an interface not in the hotspot) port 80 to 8080, and same problem.

Actually the problem does not always happen, i've verified with IE6 and FF2. Sometimes happens at login, and other times it allows to login but then fails at loging out.
The big cookie is only sent when loging to that account (no matter what computer or browser using). Other accounts generate a reasonable sized cookie.

Is it posssible to login to HotMail without proxy enabled ?

Yes. Using only web-proxy work too, either by configuring browser to do it or redirecting in firewall to port 3128.

If you are an admin I can give you the account data so you can reproduce the problem.

jonjr · Thu Aug 02, 2007 9:56 pm

Try and change http 1.1 settins in IE. ( Tools > Internet options > Advance ) .
Try with both settings enabled or both disabled.

Ip-proxy long header error 400 (hotmail)

Ip-proxy long header error 400 (hotmail)

Re: Ip-proxy long header error 400 (hotmail)

Re: Ip-proxy long header error 400 (hotmail)

Re: Ip-proxy long header error 400 (hotmail)

Who is online