Hi Yutaka,

Thanks for your reply.

I've been testing using the same config file, with 9.8.5-pre1, but I'm
still unsuccessfull.

No traffic appears to be going to the destination server (when looking
in our firewall logging).

Here's the logfile:

09/05 08:35:20.90 [1400] 0+0: --- [ssl] 0 dglibssl.dll
09/05 08:35:20.90 [1400] 0+0: --- [ssl] 0 ssl.dll
09/05 08:35:20.90 [1400] 0+0: --- [ssl] 0 ssl
09/05 08:35:20.90 [1400] 0+0: ## cannot load ssl
09/05 08:35:20.90 [1400] 0+0: --- [libeay32] 0 dgliblibeay32.dll
09/05 08:35:20.90 [1400] 0+0: --- [/DeleGate/lib\libeay32.dll]
09/05 08:35:20.90 [1400] 0+0: --- [libeay32] 10000000
/DeleGate/lib\libeay32.dll
09/05 08:35:20.90 [1400] 0+0: --- [libeay32] optional: SSL_set_SSL_CTX
09/05 08:35:20.90 [1400] 0+0: --- [libeay32] optional:
SSL_get_servername
09/05 08:35:20.90 [1400] 0+0: --- [libeay32] optional:
SSL_get_servername_type
09/05 08:35:20.90 [1400] 0+0: --- [libeay32] optional:
SSL_CTX_callback_ctrl
09/05 08:35:20.90 [1400] 0+0: --- [libeay32] optional:
SSL_CTX_use_certificate_chain_file
09/05 08:35:20.90 [1400] 0+0: --- [libeay32] optional:
SSL_CTX_set_session_id_context
09/05 08:35:20.90 [1400] 0+0: --- [libeay32] optional:
SSL_CTX_set_generate_session_id
09/05 08:35:20.90 [1400] 0+0: ---- [libeay32] loaded 102 syms,
unknown=47+7, already=0
09/05 08:35:20.90 [1400] 0+0: --- [ssleay32] 0 dglibssleay32.dll
09/05 08:35:20.90 [1400] 0+0: --- [/DeleGate/lib\ssleay32.dll]
09/05 08:35:20.90 [1400] 0+0: --- [ssleay32] F00000
/DeleGate/lib\ssleay32.dll
09/05 08:35:20.90 [1400] 0+0: ---- [ssleay32] loaded 102 syms,
unknown=0+0, already=47
09/05 08:35:20.90 [1400] 0+0: ---- unknown = 0+0, already = 47 / 102
09/05 08:35:20.90 [1400] 0+0: +++ loaded OpenSSL 0.9.8g 19 Oct 2007
09/05 08:35:20.92 [1400] 0+0: ... testing resolver[SYS] with
'WWW.DeleGate.ORG'
09/05 08:35:20.92 [1400] 0+0: ... you can suppress this test by
RES_WAIT=0
09/05 08:35:20.92 [1400] 0+0: ... gethostname(rd-was19-v)
09/05 08:35:20.92 [1400] 0+0: configuring default RESOLV ...
09/05 08:35:20.92 [1400] 0+0: ... gethostname()='rd-was19-v'
09/05 08:35:20.92 [1400] 0+0: ... SYS: rd-was19-v -> 192.168.1.60
09/05 08:35:20.92 [1400] 0+0: ... DNS: 192.168.1.60 ->
certinternal.test.nl
09/05 08:35:20.92 [1400] 0+0: ... DNS available
09/05 08:35:20.92 [1400] 0+0: ... NIS not available (no default domain)
09/05 08:35:20.92 [1400] 0+0: ... export RES_ORDER=CFD
09/05 08:35:20.92 [1400] 0+0: {R}
confid(detected)[9e444c56c82dc1bc55a42ac40c686088]<-[]
09/05 08:35:20.92 [1400] 0+0: export RESOLV=cache,file,dns (set by
default)
SRCSIGN=9.8.5-pre1:20080905105714+0900:be5143a3b56603e2:Author@DeleGate..
ORG:a9lNFuLHuNUEQU6ImScJCllhLSiOXDlY4v5ZBpFz/hVuOAZ3vijwh5yxPnPP/7tJg/BY
mkOz6qviTtWeEI/VyPz4cWtrqfWWZw/NKu4erhMyygSXAlffy9O521+JZru/T+8GBdkyjblR
sWsqIMV52pPE7keWmROAqZfN5tHUT3E=
BLDSIGN=9.8.5-pre1:20080905105837+0900:be5143a3b56603e2::-
09/05 08:35:20.92 [1400] 0+0: --INITIALIZATION START-08090508+0100:
9.8.5-pre1 on WindowsNT--
09/05 08:35:20.92 [1400] 0+0: BINSHELL=/bin/sh
09/05 08:35:20.92 [1400] 0+0: MAXIMA=delegated:64 for small mem=1341M
09/05 08:35:20.92 [1400] 0+0: scan STLS and FILTERS before beDaemon()...
09/05 08:35:20.92 [1400] 0+0: FILTER[sslway]: sslway -cert lib/cert.crt
-key lib/cert.key
09/05 08:35:20.92 [1400] 0+0: STLS -> CMAP="sslway -cert lib/cert.crt
-key lib/cert.key:FSV:starttls"
09/05 08:35:20.92 [1400] 0+0: STLS -> CMAP="sslway -cert lib/cert.crt
-key lib/cert.key:FCL:starttls"
09/05 08:35:20.92 [1400] 0+0: --- [dgzlib1] 0 dglibdgzlib1.dll
09/05 08:35:20.94 [1400] 0+0: --- [C:\delegate\dgzlib1.dll]
09/05 08:35:20.94 [1400] 0+0: --- [dgzlib1] FC0000
C:\delegate\dgzlib1.dll
09/05 08:35:20.94 [1400] 0+0: ---- [dgzlib1] loaded 17 syms,
unknown=0+0, already=0
09/05 08:35:20.94 [1400] 0+0: +++ loaded Zlib 1.2.3.f-DeleGate-v3
09/05 08:35:20.94 [1400] 0+0: #### gzip/gunzip = dynamically linked
09/05 08:35:21.12 [1400] 0+0: ## SSLway ## 0.188000 connected/accepted
09/05 08:35:21.12 [1400] 0+0: ## SSLway initialized ctx #-99577434 0 0
(WIN) 07:35:21.123 [1400] #### send_file (1400,1)[1768,7] ->
1400[1824,0] (0,Err=87)
(WIN) 07:35:21.123 [1400] #### file to be sent fd=1 -> 0 5780000
91750400
09/05 08:35:21.14 [1400] 0+0: #### CACHE DISABLED #### Cache directory
seems not exist: C:/Program Files/DeleGate/cache
09/05 08:35:21.14 [1400] 0+0: #### start a service...
09/05 08:35:21.14 [1400] 0+0:
server_open(delegate,192.168.1.62:443,listen=20)
09/05 08:35:21.14 [1400] 0+0: server_open: 192.168.1.62:443
09/05 08:35:21.14 [1400] 0+0: server_open(delegate,192.168.1.62:443)
BOUND
09/05 08:35:23.92 [2400] 0+0: --- [ssl] 0 dglibssl.dll
09/05 08:35:23.92 [2400] 0+0: --- [ssl] 0 ssl.dll
09/05 08:35:23.92 [2400] 0+0: --- [ssl] 0 ssl
09/05 08:35:23.92 [2400] 0+0: ## cannot load ssl
09/05 08:35:23.92 [2400] 0+0: --- [libeay32] optional: SSL_set_SSL_CTX
09/05 08:35:23.92 [2400] 0+0: --- [libeay32] optional:
SSL_get_servername
09/05 08:35:23.92 [2400] 0+0: --- [libeay32] optional:
SSL_get_servername_type
09/05 08:35:23.92 [2400] 0+0: --- [libeay32] optional:
SSL_CTX_callback_ctrl
09/05 08:35:23.92 [2400] 0+0: --- [libeay32] optional:
SSL_CTX_use_certificate_chain_file
09/05 08:35:23.92 [2400] 0+0: --- [libeay32] optional:
SSL_CTX_set_session_id_context
09/05 08:35:23.92 [2400] 0+0: --- [libeay32] optional:
SSL_CTX_set_generate_session_id
09/05 08:35:23.92 [2400] 0+0: ---- [libeay32] loaded 102 syms,
unknown=47+7, already=0
09/05 08:35:23.92 [2400] 0+0: ---- [ssleay32] loaded 102 syms,
unknown=0+0, already=47
09/05 08:35:23.92 [2400] 0+0: ---- unknown = 0+0, already = 47 / 102
09/05 08:35:23.92 [2400] 0+0: +++ loaded OpenSSL 0.9.8g 19 Oct 2007
09/05 08:35:24.48 [2400] 0+0: -- checked integrity:OK (0.562)
a6f1ecf153f75354
09/05 08:35:24.48 [2400] 0+0: ## RES_ORDER=CFD
09/05 08:35:24.48 [2400] 0+0: {R}
confid(RESOLV)[95c4b2abee89c01321ca019d478ea2d5]<-[]
09/05 08:35:24.48 [2400] 0+0: ... testing resolver[CFD] with
'WWW.DeleGate.ORG'
09/05 08:35:24.48 [2400] 0+0: ... you can suppress this test by
RES_WAIT=0
09/05 08:35:24.50 [2400] 0+0: ... gethostname(rd-was19-v)
SRCSIGN=9.8.5-pre1:20080905105714+0900:be5143a3b56603e2:Author@DeleGate..
ORG:a9lNFuLHuNUEQU6ImScJCllhLSiOXDlY4v5ZBpFz/hVuOAZ3vijwh5yxPnPP/7tJg/BY
mkOz6qviTtWeEI/VyPz4cWtrqfWWZw/NKu4erhMyygSXAlffy9O521+JZru/T+8GBdkyjblR
sWsqIMV52pPE7keWmROAqZfN5tHUT3E=
BLDSIGN=9.8.5-pre1:20080905105837+0900:be5143a3b56603e2::-
09/05 08:35:24.50 [2400] 0+0: --INITIALIZATION START-08090508+0100:
9.8.5-pre1 on WindowsNT--
09/05 08:35:24.50 [2400] 0+0: EXECDIR=C:\delegate
09/05 08:35:24.50 [2400] 0+0: BINSHELL=/bin/sh
09/05 08:35:24.50 [2400] 0+0: MAXIMA=delegated:64 for small mem=1337M
09/05 08:35:24.50 [2400] 0+0: scan STLS and FILTERS before beDaemon()...
09/05 08:35:24.50 [2400] 0+0: FILTER[sslway]: sslway -cert lib/cert.crt
-key lib/cert.key
09/05 08:35:24.50 [2400] 0+0: STLS -> CMAP="sslway -cert lib/cert.crt
-key lib/cert.key:FSV:starttls"
09/05 08:35:24.50 [2400] 0+0: STLS -> CMAP="sslway -cert lib/cert.crt
-key lib/cert.key:FCL:starttls"
09/05 08:35:24.50 [2400] 0+0: ---- [dgzlib1] loaded 17 syms,
unknown=0+0, already=0
09/05 08:35:24.50 [2400] 0+0: +++ loaded Zlib 1.2.3.f-DeleGate-v3
09/05 08:35:24.50 [2400] 0+0: #### gzip/gunzip = dynamically linked
09/05 08:35:24.70 [2400] 0+0: ## SSLway ## 0.203000 connected/accepted
09/05 08:35:24.70 [2400] 0+0: ## SSLway initialized ctx #-99577434 0 0
09/05 08:35:24.70 [2400] 0+0:
server_open(delegate,192.168.1.62:443,listen=20)
09/05 08:35:24.70 [2400] 0+0: server_open: 192.168.1.62:443
09/05 08:35:24.70 [2400] 0+0: server_open(delegate,192.168.1.62:443)
BOUND
09/05 08:35:24.70 [2400] 0+0: NOT-USED DGROOT=/DeleGate/
DGROOT=C:/Program Files/DeleGate^M
09/05 08:35:24.70 [2400] 0+0: <DeleGate/9.8.5-pre1> [2400]
-P192.168.1.62:443 READY^M
09/05 08:35:24.70 [2400] 0+0: PORT= 192.168.1.62:443/12 (0,134)
09/05 08:35:24.70 [2400] 0+0: OWNER=nobody => OWNER=?/?(?/?)
09/05 08:35:24.70 [2400] 0+0: FILTER[sslway]: sslway -cert lib/cert.crt
-key lib/cert.key
09/05 08:35:24.70 [2400] 0+0: STLS -> CMAP="sslway -cert lib/cert.crt
-key lib/cert.key:FSV:starttls"
09/05 08:35:24.70 [2400] 0+0: STLS -> CMAP="sslway -cert lib/cert.crt
-key lib/cert.key:FCL:starttls"
09/05 08:35:24.72 [2400] 0+0: REMITTABLE =
http,https/{80,443},gopher,ftp,wais
09/05 08:35:24.72 [2400] 0+0: {R} SOA got
[188.134.in-addr.arpa][venlo.test.nl][hostmaster.test.nl] 2008060601
14400 3600 604800 86400
09/05 08:35:24.73 [2400] 0+0: ADMIN=admin@test..nl
protocol=https(specialist)
09/05 08:35:24.73 [2400] 0+0: #### CACHE DISABLED #### Cache directory
seems not exist: C:/Program Files/DeleGate/cache
09/05 08:35:24.73 [2400] 0+0: WORKDIR=/DeleGate/work/192.168.1.62..443
09/05 08:35:24.73 [2400] 0+0: MOUNT[0]X[3] /-/builtin/icons/* = default
09/05 08:35:24.73 [2400] 0+0: MOUNT[1]X[4] /-/* =
forbidden,from=!.RELIABLE,default
09/05 08:35:24.73 [2400] 0+0: MOUNT[2]X[0] /-* = default
09/05 08:35:24.73 [2400] 0+0: MOUNT[3]X[1] /=* = default
09/05 08:35:24.73 [2400] 0+0: MOUNT[4]X[5] /favicon.ico
builtin:icons/ysato/default.ico
default,direction=fo,onerror=404,expires=15m
09/05 08:35:24.73 [2400] 0+0: MOUNT[5]X[2] /* https://192.168.4.24/*
via=192.168.1.60
09/05 08:35:24.75 [2400] 0+0: Stay open PIDFILE for accept() lock[fd=16]
09/05 08:35:24.75 [2400] 0+0:
StickyReport[17,18]127.0.0.1:1426><127.0.0.1:1427 8192/8192 8192/65536
09/05 08:35:24.75 [2400] 0+0: env[27]
LIBPATH=.;C:\WINDOWS\system32;C:/Program
Files/DeleGate/lib;C:\delegate;C:/Program Files/DeleGate/etc
09/05 08:35:24.75 [2400] 0+0: ext[0] ADMIN=admin@test..nl
09/05 08:35:24.75 [2400] 0+0: ext[1] DGROOT=/DeleGate/
09/05 08:35:24.75 [2400] 0+0: ext[2] DELAY=reject:0,unknown:0
09/05 08:35:24.75 [2400] 0+0: ext[3] SERVER=https
09/05 08:35:24.75 [2400] 0+0: ext[4] AUTHORIZER=-ntht
09/05 08:35:24.75 [2400] 0+0: ext[5] HTTPCONF=methods:*
09/05 08:35:24.75 [2400] 0+0: ext[6] STLS=fsv,fcl,sslway -cert
lib/cert.crt -key lib/cert.key
09/05 08:35:24.75 [2400] 0+0: ext[7] MOUNT=/* https://192.168.4.24/*
via=192.168.1.60
09/05 08:35:24.75 [2400] 0+0: ext[8] REACHABLE=192.168.4.24:443
09/05 08:35:24.75 [2400] 0+0: ext[9] RELIABLE=*
09/05 08:35:24.75 [2400] 0+0: arg[1] LIBPATH=.;C:\delegate;C:/Program
Files/DeleGate/lib;delegate;C:/Program Files/DeleGate/etc
09/05 08:35:24.75 [2400] 0+0: arg[2] RESOLV=cache,file,dns
09/05 08:35:24.75 [2400] 0+0: arg[7] ADMIN=admin@test..nl
09/05 08:35:24.75 [2400] 0+0: DELEGATE_Modified[1]: 48c0d32c 1220596524
09/05 08:35:24.75 [2400] 0+0: --INITIALIZATION DONE-08090508+0100:
9.8.5-pre1 on WindowsNT--
(WIN) 07:35:24.763 [2400] --socketpair()=0 OK err=10048 0.015/1 (1426
1427) 0/0
09/05 08:35:24.76 [2400] 0+0: logMMap: 1320000 1336
09/05 08:35:24.76 [2400] 0+0: LOG-Socketpair[23,24]
(WIN) 07:36:00.216 [2400] --socketpair()=0 OK err=10048 0.015/1 (1426
1427) 0/0
(WIN) 07:36:00.248 [2400] spawn() = 488 [3956], children(alive=1/1)
0.047s
09/05 08:36:00.25 [2400] 1+0: spawn() = 488 [3956], children(alive=1/1)
0.047s
(WIN) 06:36:00.248 [3956] Path-Normalized<<< /DeleGate/
(WIN) 06:36:00.248 [3956] Path-Normalized>>> /DeleGate
09/05 08:36:00.25 [3956] 0+0: {R}
confid(RESOLV)[95c4b2abee89c01321ca019d478ea2d5]<-[]
09/05 08:36:00.25 [3956] 1+0: MAXIMA=delegated:64 for small mem=1333M
09/05 08:36:00.25 [3956] 1+0: Stay open PIDFILE for accept() lock[fd=25]
09/05 08:36:00.25 [3956] 1+1: FILTER[sslway]: sslway -cert lib/cert.crt
-key lib/cert.key
09/05 08:36:00.25 [3956] 1+1: STLS -> CMAP="sslway -cert lib/cert.crt
-key lib/cert.key:FSV:starttls"
09/05 08:36:00.25 [3956] 1+1: STLS -> CMAP="sslway -cert lib/cert.crt
-key lib/cert.key:FCL:starttls"
09/05 08:36:00.48 [3956] 1+1: ## SSLway ## 0.187000 connected/accepted
09/05 08:36:00.48 [3956] 1+1: ## SSLway initialized ctx #-99577434 0 0
09/05 08:36:00.51 [3956] 1+1: (0) accepted [58]
-@[56.38.217.136]ip76de87.speed.planet.com:34188 (0.265s)(1)
09/05 08:36:00.51 [3956] 1+1: PATH:
https://-:443!rd-was19-v:443!ip76de87.speed.planet.com:34188!anonymous@i
p76de87.speed.planet.com;1220596560
09/05 08:36:00.51 [3956] 1+1: # SSL record head[16  3  1  0 41] SSL3
8?/70
09/05 08:36:00.51 [3956] 1+1: gethostbyname(-) unknown[0.00s] 
09/05 08:36:00.51 [3956] 1+1: ## SSLway BA8 loadSession 0.000000 (0 0) /
-1
09/05 08:36:00.55 [3956] 1+1: ## SSLway ## 0.032000 sescache[0] HIT=0
sR=0 cR=1
09/05 08:36:00.56 [3956] 1+1: ## STLS ## IMPLICIT SSL ON 58,58,-1,39
09/05 08:36:00.56 [3956] 1+1: OK: SSL/cl 1220596560.51 0.00/6.00 0.00
0.05 = 1220596560.56
09/05 08:36:00.56 [3956] 1+1: 0.047 CFI_SYNC ready=2 [57/W]
09/05 08:36:00.56 [3956] 1+1: 0.047 CFI_SYNC ready=1 [A]
09/05 08:36:00.72 [3956] 1+1: ## SSLway FCL S-C:0/0 C-S:0/0
09/05 08:36:00.72 [3956] 1+1: SOCKET recv(58)=0 error=0 [0.000] TCP
AF_INET :1430 << :1431 
09/05 08:36:00.72 [3956] 1+1: HTTP empty_request ? from
ip76de87.speed.planet.com (1)
09/05 08:36:00.72 [3956] 1+1: ## left connected but dead [58]
09/05 08:36:00.72 [3956] 1+1: ---CLX 0x1 (0 0 1 0) 1/1
09/05 08:36:00.72 [3956] 1+1: disconnected [58]
-@[56.38.217.136]ip76de87.speed.planet.com:34188 (0.468s)(0)
09/05 08:36:00.72 [3956] 1+1: CFI-wait 1/1 0/1 as=0 xpid=-1,-1 0.00
09/05 08:36:00.72 [3956] 1+1: StickyServer done
[nonStickyProtocol(https:https:https)] 1 req / 1+0/1 conn / 0 sec
(WIN) 07:36:15.373 [2400] wait3(N) = 488 [3956] 0, children(alive=0/1)
0.00s
09/05 08:36:15.37 [2400] 1+0: wait3(N) = 488 [3956] 0,
children(alive=0/1) 0.00s
(WIN) 07:36:39.357 [2400] --socketpair()=0 OK err=10048 0.016/1 (1426
1427) 0/0
(WIN) 07:36:39.388 [2400] spawn() = 476 [1872], children(alive=1/2)
0.047s
09/05 08:36:39.39 [2400] 2+0: spawn() = 476 [1872], children(alive=1/2)
0.047s
(WIN) 06:36:39.388 [1872] Path-Normalized<<< /DeleGate/
(WIN) 06:36:39.388 [1872] Path-Normalized>>> /DeleGate
09/05 08:36:39.39 [1872] 0+0: {R}
confid(RESOLV)[95c4b2abee89c01321ca019d478ea2d5]<-[]
09/05 08:36:39.39 [1872] 2+0: MAXIMA=delegated:64 for small mem=1333M
09/05 08:36:39.40 [1872] 2+0: Stay open PIDFILE for accept() lock[fd=25]
09/05 08:36:39.40 [1872] 2+1: FILTER[sslway]: sslway -cert lib/cert.crt
-key lib/cert.key
09/05 08:36:39.40 [1872] 2+1: STLS -> CMAP="sslway -cert lib/cert.crt
-key lib/cert.key:FSV:starttls"
09/05 08:36:39.40 [1872] 2+1: STLS -> CMAP="sslway -cert lib/cert.crt
-key lib/cert.key:FCL:starttls"
09/05 08:36:39.62 [1872] 2+1: ## SSLway ## 0.188000 sescache[0] HIT=0
sR=0 cR=2
09/05 08:36:39.62 [1872] 2+1: ## SSLway initialized ctx #-99577434 0 0
09/05 08:36:39.64 [1872] 2+1: (0) accepted [56]
-@[56.38.217.136]ip76de87.speed.planet.com:34191 (0.250s)(1)
09/05 08:36:39.64 [1872] 2+1: PATH:
https://-:443!rd-was19-v:443!ip76de87.speed.planet.com:34191!anonymous@i
p76de87.speed.planet.com;1220596599
09/05 08:36:39.64 [1872] 2+1: # SSL record head[16  3  1  0 61] SSL3
8?/102
09/05 08:36:39.64 [1872] 2+1: gethostbyname(-) unknown[0.00s] 
09/05 08:36:39.64 [1872] 2+1: ## SSLway 20C loadSession 0.000000 (0 1) /
1
09/05 08:36:39.67 [1872] 2+1: ## SSLway ## 0.032000 sescache[1] HIT=1
sR=0 cR=1
09/05 08:36:39.67 [1872] 2+1: ## SSLway FCL S-C:0/0 C-S:0/0
09/05 08:36:39.69 [1872] 2+1: ## STLS ## IMPLICIT SSL ON 56,56,-1,37
09/05 08:36:39.69 [1872] 2+1: OK: SSL/cl 1220596599.64 0.00/6.00 0.00
0.05 = 1220596599.68
09/05 08:36:39.69 [1872] 2+1: 0.047 CFI_SYNC ready=2 [57/W]
09/05 08:36:39.69 [1872] 2+1: 0.047 CFI_SYNC ready=1 [A]
09/05 08:36:39.69 [1872] 2+1: ## left connected but dead [56]
09/05 08:36:39.69 [1872] 2+1: ## left connected but dead [56]
09/05 08:36:39.69 [1872] 2+1: ERROR: SSL/cl disconnected: 1 A 0[56]
09/05 08:36:39.69 [1872] 2+1: disconnected [56]
-@[56.38.217.136]ip76de87.speed.planet.com:34191 (0.297s)(0)
09/05 08:36:39.69 [1872] 2+1: CFI-wait 1/1 0/1 as=0 xpid=-1,-1 0.00
09/05 08:36:39.69 [1872] 2+1: StickyServer done
[nonStickyProtocol(https:https:https)] 1 req / 1+0/2 conn / 0 sec
(WIN) 07:36:39.732 [2400] --socketpair()=0 OK err=10048 0.016/1 (1426
1427) 0/0
(WIN) 07:36:39.763 [2400] spawn() = 564 [2036], children(alive=2/3)
0.047s
09/05 08:36:39.76 [2400] 3+0: spawn() = 564 [2036], children(alive=2/3)
0.047s
(WIN) 06:36:39.763 [2036] Path-Normalized<<< /DeleGate/
(WIN) 06:36:39.763 [2036] Path-Normalized>>> /DeleGate
09/05 08:36:39.76 [2036] 0+0: {R}
confid(RESOLV)[95c4b2abee89c01321ca019d478ea2d5]<-[]
09/05 08:36:39.76 [2036] 3+0: MAXIMA=delegated:64 for small mem=1330M
09/05 08:36:39.76 [2036] 3+0: Stay open PIDFILE for accept() lock[fd=25]
09/05 08:36:39.76 [2036] 3+1: FILTER[sslway]: sslway -cert lib/cert.crt
-key lib/cert.key
09/05 08:36:39.76 [2036] 3+1: STLS -> CMAP="sslway -cert lib/cert.crt
-key lib/cert.key:FSV:starttls"
09/05 08:36:39.76 [2036] 3+1: STLS -> CMAP="sslway -cert lib/cert.crt
-key lib/cert.key:FCL:starttls"
09/05 08:36:39.99 [2036] 3+1: ## SSLway ## 0.188000 sescache[0] HIT=0
sR=0 cR=2
09/05 08:36:39.99 [2036] 3+1: ## SSLway initialized ctx #-99577434 0 0
09/05 08:36:40.01 [2036] 3+1: (1) accepted [63]
-@[56.38.217.136]ip76de87.speed.planet.com:34192 (0.250s)(1)
09/05 08:36:40.01 [2036] 3+1: PATH:
https://-:443!rd-was19-v:443!ip76de87.speed.planet.com:34192!anonymous@i
p76de87.speed.planet.com;1220596600
09/05 08:36:40.01 [2036] 3+1: # SSL record head[16  3  1  0 61] SSL3
8?/102
09/05 08:36:40.01 [2036] 3+1: gethostbyname(-) unknown[0.00s] 
09/05 08:36:40.01 [2036] 3+1: ## SSLway 9BC loadSession 0.000000 (0 1) /
1
09/05 08:36:40.04 [2036] 3+1: ## SSLway ## 0.032000 sescache[1] HIT=1
sR=0 cR=1
09/05 08:36:40.06 [2036] 3+1: ## STLS ## IMPLICIT SSL ON 63,63,-1,36
09/05 08:36:40.06 [2036] 3+1: OK: SSL/cl 1220596600.01 0.00/6.00 0.00
0.05 = 1220596600.06
09/05 08:36:40.06 [2036] 3+1: 0.047 CFI_SYNC ready=2 [57/W]
09/05 08:36:40.06 [2036] 3+1: 0.047 CFI_SYNC ready=1 [A]
09/05 08:36:40.06 [2036] 3+1: Proxy: host=ip76de87.speed.planet.com;
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1;
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; InfoPath.1;
.NET CLR 2.0.50727); DIRECT
09/05 08:36:40.06 [2036] 3+1: HCKA:[0] Keep-Alive;
host=ip76de87.speed.planet.com; (User-Agent: Mozilla/4.0 (compatible;
MSIE 7.0; Windows NT 5.1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1; SV1) ; InfoPath.1; .NET CLR 2.0.50727))
09/05 08:36:40.08 [2036] 3+1: REQUEST - GET / HTTP/1.1^M
09/05 08:36:40.08 [2036] 3+1: *** / => https://192.168.4.24/ ***
09/05 08:36:40.08 [2036] 3+1: REQUEST +M https://192.168.4.24/
HTTP/1.1^M
09/05 08:36:40.08 [2036] 3+1: ----NTHT accept 0 MO=1 UT=0
09/05 08:36:40.08 [2036] 3+1: ----NTHT_accept(0,63,63) ss=0
09/05 08:36:40.08 [2036] 3+1: ####cred name=NT AUTHORITY\SYSTEM
09/05 08:36:40.08 [2036] 3+1: ====NTLM Start
09/05 08:36:40.08 [2036] 3+1: SOCKET recv(41)=0 error=0 [0.000] TCP
AF_INET :1435 << :1434 
09/05 08:36:40.08 [2036] 3+1: ## SSLway FCL S-C:64/1 C-S:713/1
(WIN) 07:36:40.091 [2036] send(356) = -1+0 errno=10058 [1688]
09/05 08:36:40.09 [2036] 3+1: ## got SIGPIPE [1] in HTTP: 
(WIN) 07:36:40.091 [2036] +++EPIPE[63] fflushTIMEOUT() for EOF
09/05 08:36:40.09 [2036] 3+1: ClientEOF: request-EOF-7 [63 63] 330 8000
1
09/05 08:36:40.09 [2036] 3+1: HCKA:[0] closed -- d:by client(request
EOF-7)
09/05 08:36:40.09 [2036] 3+1: disconnected [63]
-@[56.38.217.136]ip76de87.speed.planet.com:34192 (0.328s)(0)
09/05 08:36:40.09 [2036] 3+1: CFI-wait 1/1 0/1 as=0 xpid=-1,-1 0.00
09/05 08:36:40.09 [2036] 3+1: StickyServer done
[nonStickyProtocol(https:https:https)] 1 req / 1+0/3 conn / 1 sec
(WIN) 07:36:40.107 [2400] wait3(N) = 476 [1872] 0, children(alive=1/3)
0.00s
09/05 08:36:40.11 [2400] 3+0: wait3(N) = 476 [1872] 0,
children(alive=1/3) 0.00s
(WIN) 07:36:54.904 [2400] wait3(N) = 564 [2036] 0, children(alive=0/3)
0.00s
09/05 08:36:54.90 [2400] 3+0: wait3(N) = 564 [2036] 0,
children(alive=0/3) 0.00s
09/05 08:38:47.75 [3532] 0+0: --- [ssl] 0 dglibssl.dll
09/05 08:38:47.75 [3532] 0+0: --- [ssl] 0 ssl.dll
09/05 08:38:47.75 [3532] 0+0: --- [ssl] 0 ssl
09/05 08:38:47.75 [3532] 0+0: ## cannot load ssl
09/05 08:38:47.75 [3532] 0+0: --- [libeay32] 0 dgliblibeay32.dll
09/05 08:38:47.75 [3532] 0+0: --- [/DeleGate/lib\libeay32.dll]
09/05 08:38:47.75 [3532] 0+0: --- [libeay32] 10000000
/DeleGate/lib\libeay32.dll
09/05 08:38:47.75 [3532] 0+0: --- [libeay32] optional: SSL_set_SSL_CTX
09/05 08:38:47.75 [3532] 0+0: --- [libeay32] optional:
SSL_get_servername
09/05 08:38:47.75 [3532] 0+0: --- [libeay32] optional:
SSL_get_servername_type
09/05 08:38:47.75 [3532] 0+0: --- [libeay32] optional:
SSL_CTX_callback_ctrl
09/05 08:38:47.75 [3532] 0+0: --- [libeay32] optional:
SSL_CTX_use_certificate_chain_file
09/05 08:38:47.75 [3532] 0+0: --- [libeay32] optional:
SSL_CTX_set_session_id_context
09/05 08:38:47.75 [3532] 0+0: --- [libeay32] optional:
SSL_CTX_set_generate_session_id
09/05 08:38:47.75 [3532] 0+0: ---- [libeay32] loaded 102 syms,
unknown=47+7, already=0
09/05 08:38:47.75 [3532] 0+0: --- [ssleay32] 0 dglibssleay32.dll
09/05 08:38:47.75 [3532] 0+0: --- [/DeleGate/lib\ssleay32.dll]
09/05 08:38:47.75 [3532] 0+0: --- [ssleay32] F00000
/DeleGate/lib\ssleay32.dll
09/05 08:38:47.75 [3532] 0+0: ---- [ssleay32] loaded 102 syms,
unknown=0+0, already=47
09/05 08:38:47.75 [3532] 0+0: ---- unknown = 0+0, already = 47 / 102
09/05 08:38:47.75 [3532] 0+0: +++ loaded OpenSSL 0.9.8g 19 Oct 2007
09/05 08:38:47.75 [3532] 0+0: ... testing resolver[SYS] with
'WWW.DeleGate.ORG'
09/05 08:38:47.75 [3532] 0+0: ... you can suppress this test by
RES_WAIT=0
09/05 08:38:47.76 [3532] 0+0: ... gethostname(rd-was19-v)
09/05 08:38:47.76 [3532] 0+0: configuring default RESOLV ...
09/05 08:38:47.76 [3532] 0+0: ... gethostname()='rd-was19-v'
09/05 08:38:47.76 [3532] 0+0: ... SYS: rd-was19-v -> 192.168.1.60
09/05 08:38:47.76 [3532] 0+0: ... DNS: 192.168.1.60 ->
certinternal.test.nl
09/05 08:38:47.76 [3532] 0+0: ... DNS available
09/05 08:38:47.76 [3532] 0+0: ... NIS not available (no default domain)
09/05 08:38:47.76 [3532] 0+0: ... export RES_ORDER=CFD
09/05 08:38:47.76 [3532] 0+0: {R}
confid(detected)[9e444c56c82dc1bc55a42ac40c686088]<-[]
09/05 08:38:47.76 [3532] 0+0: export RESOLV=cache,file,dns (set by
default)
SRCSIGN=9.8.5-pre1:20080905105714+0900:be5143a3b56603e2:Author@DeleGate..
ORG:a9lNFuLHuNUEQU6ImScJCllhLSiOXDlY4v5ZBpFz/hVuOAZ3vijwh5yxPnPP/7tJg/BY
mkOz6qviTtWeEI/VyPz4cWtrqfWWZw/NKu4erhMyygSXAlffy9O521+JZru/T+8GBdkyjblR
sWsqIMV52pPE7keWmROAqZfN5tHUT3E=
BLDSIGN=9.8.5-pre1:20080905105837+0900:be5143a3b56603e2::-
09/05 08:38:47.78 [3532] 0+0: --INITIALIZATION START-08090508+0100:
9.8.5-pre1 on WindowsNT--
09/05 08:38:47.78 [3532] 0+0: BINSHELL=/bin/sh
09/05 08:38:47.78 [3532] 0+0: MAXIMA=delegated:64 for small mem=1332M
09/05 08:38:47.78 [3532] 0+0: scan STLS and FILTERS before beDaemon()...
09/05 08:38:47.78 [3532] 0+0: FILTER[sslway]: sslway -cert lib/cert.crt
-key lib/cert.key
09/05 08:38:47.78 [3532] 0+0: STLS -> CMAP="sslway -cert lib/cert.crt
-key lib/cert.key:FSV:starttls"
09/05 08:38:47.78 [3532] 0+0: STLS -> CMAP="sslway -cert lib/cert.crt
-key lib/cert.key:FCL:starttls"
09/05 08:38:47.78 [3532] 0+0: --- [dgzlib1] 0 dglibdgzlib1.dll
09/05 08:38:47.78 [3532] 0+0: --- [C:\delegate\dgzlib1.dll]
09/05 08:38:47.78 [3532] 0+0: --- [dgzlib1] FC0000
C:\delegate\dgzlib1.dll
09/05 08:38:47.78 [3532] 0+0: ---- [dgzlib1] loaded 17 syms,
unknown=0+0, already=0
09/05 08:38:47.78 [3532] 0+0: +++ loaded Zlib 1.2.3.f-DeleGate-v3
09/05 08:38:47.78 [3532] 0+0: #### gzip/gunzip = dynamically linked
09/05 08:38:47.98 [3532] 0+0: ## SSLway ## 0.203000 connected/accepted
09/05 08:38:47.98 [3532] 0+0: ## SSLway initialized ctx #-99577434 0 0
(WIN) 07:38:47.982 [3532] #### send_file (3532,1)[1768,7] ->
3532[1824,0] (0,Err=87)
(WIN) 07:38:47.982 [3532] #### file to be sent fd=1 -> 0 DCC0000
231473152
09/05 08:38:47.98 [3532] 0+0: #### CACHE DISABLED #### Cache directory
seems not exist: C:/Program Files/DeleGate/cache
09/05 08:38:47.98 [3532] 0+0: #### start a service...
09/05 08:38:47.99 [3532] 0+0:
server_open(delegate,192.168.1.62:443,listen=20)
09/05 08:38:47.99 [3532] 0+0: server_open: 192.168.1.62:443
09/05 08:38:47.99 [3532] 0+0: server_open(delegate,192.168.1.62:443)
BOUND
(WIN) 07:38:50.873 [2400] [3896] svc Terminate...
09/05 08:38:50.87 [2400] 3+0: TERMINATE...
09/05 08:38:50.87 [2400] 3+0: CRC ERROR 0 FFFFFFB8
09/05 08:38:50.87 [2400] 3+0: StickyKill(15): 0/0 killed
09/05 08:38:50.87 [2400] 3+0: unlinked
/DeleGate/work/192.168.1.62..443/2400
09/05 08:38:50.87 [2400] 3+0: removed /DeleGate/work/192.168.1.62..443/
09/05 08:38:50.89 [2400] 3+0: TERMINATED.
09/05 08:38:50.89 [2400] 3+0: AcceptByMain: break on TERMINATE.
09/05 08:38:50.89 [2400] 3+0: main loop break on TERMINATE.
09/05 08:38:50.89 [2400] 3+0: _main() done
09/05 08:38:50.89 [2400] 3+0: SetStatus: STOPPED
(WIN) 07:38:50.888 [2400] [1988] svc SetStatus: STOPPED
09/05 08:38:50.89 [2400] 3+0: SetStatus: STOP
(WIN) 07:38:50.888 [2400] [3896] svc SetStatus: STOP
(WIN) 07:38:50.888 [2400] [1988] svc ExitThread() from ServiceStart()
(WIN) 07:38:50.920 [2400] [3896] svc start_service() done (1,1,0)
(WIN) 07:38:50.920 [2400] [3896] svc DO_INITIALIZE -> DO_FINALIZE
(WIN) 07:38:50.920 [2400] [3896] svc DO_FINALIZE 0 0 

Thanks. 

Kind regards,

Willy Nagel.

-----Original Message-----
From: Yutaka Sato [mailto:feedback@delegate.org] 
Sent: Friday, September 05, 2008 4:13 AM
To: feedback@delegate.org
Cc: Nagel, Willy
Subject: Re: [DeleGate-En] FW: [DeleGate-En] Windows Integrated
Authentication

Hi Willy,

First of all, it seems that I disabled the ability to relay NTLM
authentication with AUTHORIZER=-ntht or -Enh.  It should be fixed as the
enclosed patch.  I uploaded the modified version as 9.8.5-pre1.
Thank you for your notice.

In message
<_A4103@delegate-en.ML_>
on 09/04/08(19:09:05) you "Nagel, Willy" <ptihqbdyi-6rjyzcoqec3r.ml@ml.delegate.org> wrote:
 |AUTHORIZER=-ntht
...
 |The setup is as follows:
 |
 |IIS (destination ip) - (other-ip-of-delegate-server) delegate
 |(ip-to-listen-on) - client
 |
 |In IIS windows integrated authentication (NTLM) is enabled.
 |
 |Still, when connecting to delegate, I'm unable to connect. The logfile
 |shows:
 |
 |09/04 09:59:33.97 [2444] 3+1: REQUEST - GET / HTTP/1.1^M
 |09/04 09:59:33.97 [2444] 3+1: *** / => destination_ip/ ***
 |09/04 09:59:33.97 [2444] 3+1: REQUEST +M destination_ip/ HTTP/1.1^M
 |09/04 09:59:33.98 [2444] 3+1: ----NTHT accept 0 MO=1 UT=0
 |09/04 09:59:33.98 [2444] 3+1: ----NTHT_accept(0,53,53) ss=0
 |09/04 09:59:33.98 [2444] 3+1: ####cred name=NT AUTHORITY\SYSTEM
 |09/04 09:59:33.98 [2444] 3+1: ====NTLM Start ...
 |09/04 09:59:33.98 [2444] 3+1: disconnected [53] -@[ip]hostname:31199

The NTLM authentication is achieved in two phases and this log shows
only the first phase just to return a challenge response to the client.
The problem was in the second phase to be followed right after this.

 |Is there something wrong in my setup / configuration or did I miss
|anything? Any help would be appreciated.
 |
 |In your documentation I don't find anything about the -Enh option.

It is not ducumented because It might be the default behavior in future
version.

Cheers,
Yutaka
--
  9 9   Yutaka Sato <y.sato@delegate.org> http://delegate.org/y.sato/
 ( ~ )  National Institute of Advanced Industrial Science and Technology
_<   >_ 1-1-4 Umezono, Tsukuba, Ibaraki, 305-8568 Japan
Do the more with the less -- B. Fuller

*** dist/src/delegate9.8.4/src/http.c	Wed Sep  3 05:11:24 2008
--- src/http.c	Fri Sep  5 09:51:03 2008
***************
*** 11443,11450 ****
--- 11443,11457 ----
  		if( lSECRET() ){
  			sv1log("----NTHT retryAuth:
%s%sX\n",REQ,REQ_FIELDS);
  		}
+ 		/*
  		if( (withNTHT & NTHT_REQ) && (withNTHT & NTHT_RES) ){
+ 		*/
+ 		if( withNTHT & NTHT_RES ){
+ 			if( withNTHT & NTHT_CLAUTHOK ){
+ 				sv1log("----NTHT with client's
auth.\n");
+ 			}else
  			if( (HTTP_opts & HTTP_DOAUTHCONV) == 0 ){
+ 				sv1log("----NTHT without auth.
conv.\n");
  				flushRESP(Conn,ftc);
  				return;
  			}


This message and attachment(s) are intended solely for use by the addressee and may contain information that is privileged, confidential or otherwise exempt from disclosure under applicable law.

If you are not the intended recipient or agent thereof responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited.

If you have received this communication in error, please notify the sender immediately by telephone and with a 'reply' message.

Thank you for your co-operation.