Accessing Youtube via Proxy (Ipod Touch)

Question

Level 1

1 points

Accessing Youtube via Proxy (Ipod Touch)

Steps Required to Resolve Accessing Youtube.com via Ipod touch via Squid proxy:

I have a Squid 7.2.6 using Dansguardian 2.10.0.3 installed on CentOS 5.3 (fully patched as of last Friday July 10, 2009)

This server is my main proxy for my children's access to the internet. It has worked flawlessly until they wanted Ipod touches. That is when I realized everything BUT youtube.com worked.

Others have mentioned using squid redirector (squidguard and squirm) and honestly the rpm installers for CentOS just did not work or installed in the wrong default directories (no amount of linking and alternate configuration file creation would work)

To get around this I used dansguardian's urlregxplist:
"/etc/dansguardian/lists/urlregexplist"

I added the following lines:
"(^ http://iphone-wu.apple.com/feeds/api/)"->"http://gdata.youtube.com/feeds/api/"
"(^ http://iphone-wu.apple.com/feeds/videos/)"->"http://gdata.youtube.com/feeds/videos/"

I restarted dansguardian (restart dansguardian restart) and now I have proxied protected youtube on Ipod touch.

Related Links:
http://dansguardian.org/downloads/detailedinstallation.html

Note:
This should work with any future failures (just look at /var/log/dansguardian/access.log for any failures and add the appropriate redirection (take some figuring out) to the urlregexplist.

Enjoy,
Airwolf

iPhone OS 2.x

Posted on Jul 12, 2009 6:35 PM

Reply

Answer 1

gstokes1

Level 1

4 points

Oct 3, 2009 12:42 AM in response to airwolff

I am a bit mystified ..... your hint worked great for my iphone ... OS3.1
but not for my son's ipod touch os2.?

I'm using Dansguardian on ubuntu 8.04 server, but i don't think that should make a difference.

now this line:
^ http://iphone-wu.apple.com/feeds/api/)"->"http://gdata.youtube.com/feeds/api/"
means if it starts with ^ http://iphone-wu.apple.com/feeds/api/ change that part of the url to http://gdata.youtube.com/feeds/api/ right?

my problem seems to be that some stuff about the client is embedded since the only differences I can see are that the iphone request looks like :
http://iphone-wu.apple.com/feeds/api/videos/JydmM7qyPg4 URLMOD GET 6217 0 4 200 application/atom+xml veryhigh' -

whereas the ipod request for the same video is :
http://iphone-wu.apple.com/feeds/videos/JydmM7qyPg4?client=ytapi-apple-ipodtouch URLMOD GET 5480 0 4 200 application/atom+xml veryhigh' -

the string "?client=ytapi-apple-ipodtouch" is the same in all ipod requests, NO client string in iphone..

I'm not real good on regexp, so any help you can provide would be greatly appreciated

Reply

Answer 2

gstokes1

Level 1

4 points

Oct 3, 2009 2:39 AM in response to gstokes1

Sorry,
worked out my own problem .... added :
"(\?client=ytapi-apple-ipodtouch)"->""
to /etc/dansguardian/lists/urlregexplist
now works

Reply

Answer 3

Dec 28, 2009 9:26 PM in response to airwolff

I am having the same trouble getting an iTouch to work through my dansguardian filter.

As far as I can tell the problem is in the squid proxy server. This is what I know for an unfiltered, non-proxied connection from the iTouch to Youtube:

1) The iTouch app first initiates an SSL connection to google.com and some secret information is traded.
2) Then a standard http request is made to wu.apple.com for playlist information.

If I initiate an http request with my desktop browser to wu.apple.com, a 404 error results. Apparently, the SSL connection by the iTouch is used to 'authorize' my IP address or get a ticket of some kink, so the subsequent http request to wu.apple.com will then work.

So this looks to me like the initial SSL connection to google.com through the proxy is failing. Since dansguaridan simply passes the HTTPS connection to squid, it's not a dansguardian problem per se, but for some reason squid is failing to establish the SSL connection. I have checked the access logs for both dansguardian and squid and dansguardian is not blocking any requests, but the SSL connection through squid isn't working.

Any help is appreciated.

Reply