It is now possible for the user to authenticate to the proxy (rainbow client 1.33.3.0). If there has not yet been a user login on the proxy, the client tries to connect to the internet at subsecond intervals. This has a lot of log entries to follow such as this:
Wed Nov 29 17:41:022017 0 192.x.x.x TCP_DENIED_REPLY/407 3508 CONNECTweb.openrainbow.com:443 - HIER_NONE/- text/html Wed Nov 29 17:41:022017 0 192.x.x.x TCP_DENIED_REPLY/407 3508 CONNECTweb.openrainbow.com:443 - HIER_NONE/- text/html Wed Nov 29 17:41:022017 0 192.x.x.x TCP_DENIED_REPLY/407 3508 CONNECTweb.openrainbow.com:443 - HIER_NONE/- text/html Wed Nov 29 17:41:022017 0 192.x.x.x TCP_DENIED_REPLY/407 3508 CONNECTweb.openrainbow.com:443 - HIER_NONE/- text/html Wed Nov 29 17:41:022017 0 192.x.x.x TCP_DENIED_REPLY/407 3508 CONNECTweb.openrainbow.com:443 - HIER_NONE/- text/html Wed Nov 29 17:41:052017 5095 192.x.x.x TCP_MISS/200 1451 CONNECT web.openrainbow.com:443Timo FIRSTUP_PARENT/192.y.y.y - Wed Nov 29 17:41:072017 6037 192.x.x.x TCP_MISS/200 12778 CONNECT openrainbow.com:443Timo FIRSTUP_PARENT/192.y.y.y - Wed Nov 29 17:41:072017 5402 192.x.x.x TCP_MISS/200 1896 CONNECT openrainbow.com:443Timo FIRSTUP_PARENT/192.y.y.y - Wed Nov 29 17:41:072017 5781 192.x.x.x TCP_MISS/200 12788 CONNECT openrainbow.com:443Timo FIRSTUP_PARENT/192.y.y.y - Wed Nov 29 17:41:072017 5942 192.x.x.x TCP_MISS/200 25753 CONNECT openrainbow.com:443Timo FIRSTUP_PARENT/192.y.y.y - Wed Nov 29 17:41:072017 5139 192.x.x.x TCP_MISS/200 5104 CONNECT web.openrainbow.com:443Timo FIRSTUP_PARENT/192.y.y.y -
The address 192.x.x.x represents a wildcard for the address of the computer on which the rainbow client is running.
The client should not try to connect to the internet before logging in. This could prevent the log entries.
|
Comments
1 comment