Users behind proxied networks

[nubduck]

Hi,

I have international users who reach my ispCP server through proxy from their ISP. The proxy frequently changes ip address.

Their problem: when they login to their ispCP account, usually clicking any link after the logged in page (Control Panel Home) will throw the user back to the login page again.

I tried several searches but couldn't find a solution to it yet.

My ispCP version:
ispCP 1.0.7 OMEGA
build: 20101124

Thanks in advance!

----

E-mail Log:

ispCP Log

Server: server (xx.xx.xx.xx)
Version: ispCP 1.0.7 OMEGA (20101124)

Message: ----------------[BEGIN]--------------------------

user logged in.
User IP: xx.xx.xx.87

Message: ----------------[END]----------------------------

ispCP Log

Server: server (xx.xx.xx.xx)
Version: ispCP 1.0.7 OMEGA (20101124)

Message: ----------------[BEGIN]--------------------------

user logged in.
User IP: xx.xx.xx.49

Message: ----------------[END]----------------------------

ispCP Log

Server: server (xx.xx.xx.xx)
Version: ispCP 1.0.7 OMEGA (20101124)

Message: ----------------[BEGIN]--------------------------

user logged in.
User IP: xx.xx.xx.29

Message: ----------------[END]----------------------------

ispCP Log

Server: server (xx.xx.xx.xx)
Version: ispCP 1.0.7 OMEGA (20101124)

Message: ----------------[BEGIN]--------------------------

user logged in.
User IP: xx.xx.xx.13

Message: ----------------[END]----------------------------

etc etc, a whole load of similar emails with just different user IP.

[kilburn]

The panel has no option to account for this (very strange) kind of proxy behaviour. Anyway, I think that you can bypass this problem by removing the captcha and bruteforce protections directly in the code.

Basically, I would try opening the file "/var/www/ispcp/gui/include/login-functions.php" and modifying all the "check functions" (everything that potentially denies access to the panel) so that they always let the user get through....

[nubduck]

(04-14-2011 04:47 PM)kilburn Wrote:  The panel has no option to account for this (very strange) kind of proxy behaviour. Anyway, I think that you can bypass this problem by removing the captcha and bruteforce protections directly in the code.

Basically, I would try opening the file "/var/www/ispcp/gui/include/login-functions.php" and modifying all the "check functions" (everything that potentially denies access to the panel) so that they always let the user get through....

Thx for the fast response! Took me quite a little while to read through the file, but I have no clue which lines to comment out to disable certain checks, any pointers?

[nubduck]

sorry gotta bump this up, not sure if anybody else has this problem, but on wed GMT +0 during the mass IPv6 test, even more users are put across proxy gateways to access the net, this problem thus multiplied..

any kind soul care to shed some light on which lines do i have to edit?

[nubduck]

Just a quick update:

The above issue can be bypassed if I forced ispCP to run on an alternative port - ie: instead of 80, say 12345

Basically for any port above 1023, since the strange proxy behavior does not apply to web traffic above the mentioned port.

Did this testing on a VM off a live server, so far so good. I basically forced the port change on apache2..

Is there a proper documentation on where I can change the default ispCP port?
[Edit] found it! http://isp-control.net/documentation/dok...efaultport

hope this can help anybody who is facing the same problem!