iPhone, YouTube and transparent proxy

[Guest]

[LttlScamp]

Any one else out there experiencing the problem where you're unable to view YouTube  on the iPhone (either through the native app or m.youtube.com) when using the transparent proxy in EFW? 

If I set the default access policy to "no filtering" (versus "virus detection only") I have no problems.  But as soon as the virus scanning is turned on it won't load a video.  It seems like this is a known issue but most of the posts relate to the iphone-wu.apple.com host that the native app connects to for some functions.  But the problem is also occuring with m.youtube.com which shouldn't be relying on the Apple host.

I've tried creating an access policy for the destination domain youtube.com, googlevideo.com, etc and setting it to no filtering but I have had no luck getting things to work.

Any ideas out there?

[vondie]

Can you list down your EFW outgoing traffic rules here?

[LttlScamp]

This happens with our without the outgoing firewall turned on.  If I put my iPhone's IP in the bypass proxy list it works fine so it's definitely related to Squid.

I've seen some discussion about it in a few places (google "iphone youtube squid" - looks like I'm not aloud to post clickable links).

However, this is also happening with the mobile youtube site (m.youtube.com), not just the native iPhone app so I don't believe the problem described in the Apple forum is what is happening.

I also don't see any connections to iphone-wu.apple.com as suggested in the post when using the native app.  I think that info is somewhat dated but there is definitely still something not right.

[LttlScamp]

Well, I've confirmed that Havp is the culprit here.  If I disable antivirus scanning in the proxy policy it's all good.

Looks like it's a known issue and can be solved by adding "SKIPMIME image/* video/* audio/*" to the havp.conf.tmpl file.  Unfortunately that option is only supported in .92+ and Endian uses .90.

[kevsworld]

I have the same issue and came to the same conclusion.  I guess the best solution for the moment is just to include the device (same issue with ipad and android youtube apps) in the bypass proxy list.  Hopefully, the next update from endian will solve this issue.

[mrvllus]

I am running version 2.5 and am running into the same issues.  I have tried both suggestions here:

bugs.endian.com/view.php?id=3432

which consist inserting the following into /etc/havp/havp.conf.tmpl:

RANGE true


this did not work, so I added the following into /etc/havp/havp.conf.tmpl

SKIPMIME image/* video/* audio/*

This did not work either.

[endianupdate]

I have created an Access Policy with the destination type of Domain and added .youtube.com to the domain list

Source - Zone (Green, Orange, Blue)
Access policy - Allow access
Filter profile - none
Position - first position

This should bypass all Contentfilter and antivirus scanning

Hope this helps

[mrvllus]

I went back and inserted  the following into /etc/havp/havp.conf.tmpl:

RANGE true

Then I made sure that the server was updated, which re-read the config and it started working.

[ruhllatio]

All,

I don't even do this.  I just make sure HTTP Proxy is set to Auto in the WiFi profile I use at home in the iPhone settings.  By default it is set to off in the iPhone. Without it, it blocks pretty much everything behind an Endian running Squid.  Apple Store, YouTube, etc.