iPhone can't connect to fiddler proxy server - proxy

I have been debugging my software by connecting an iphone which is on the same network. Then I use fiddler on my desktop/server and set it to Allow Remote Connection (instructions here). I had this configuration working under Windows Server 2012, since I've upgraded my server to Server 2016 I am no longer able to get the phone to connect to the proxy server at xx.xx.xx.xx:8888. I checked "Allowed Apps" in the Windows Firewall but I don't see anything that looks relevant in there.
I am able to connect to the web server I have running on my server 2016 from my phone so they are able to talk to each other. I just can't access the fiddler proxy server.
Fiddler says it is online and appears to be working correctly.
I'm using Fiddler v4.6.20171.7553.
Is there some setting in windows firewall that might be blocking my proxy server connection?

I figured it out. I changed the firewall settings in Windows firewall to ask me if an app was going to be blocked. After restarting fiddler I was prompted and I said yes, allow this app to go through the firewall and then it started working.

Related

Fiddler not capturing some connections

I'm trying to use Fiddler version 5.0.20202.18177 (latest as of writing) to determine the URLs used by various online / web installers.
This works fine in most cases. For example, with SpotifySetup.exe:
However, this does not work in some cases. For example, with DropboxInstaller.exe and bitdefender_online.exe:
I have ensured that:
HTTPS decryption is set up for all processes:
All types of connections are being captured:
Windows' proxies are set as expected.
All Windows 10 AppContainer Loopback exemptions are in place:
Running Fiddler as administrator doesn't make a difference.
I would have guessed that the executables simply aren't utilising the proxy but, as far as I'm aware, if the proxy is set at the Windows level then they can't override that?
A program can use of the proxy defined in the Windows Internet settings but it also can ignore those settings and directly connect to the Internet.
The proxy settings are only used automatically for programs that use an HTTP client provided by Microsoft (e.g. WinHTTP for C/C++ or a Dot.net Http client implementation).
All other programs that use their own HTTP client can query the Windows proxy settings and apply them but this is optionally. From a Windows perspective those programs just open TCP connections, what protocol is used on the connection is unknown to Windows hence Windows could not enforce that a proxy is used even if it would try to do so.
By default even programs that come with Windows like the command-line too curl ignore the Windows proxy settings.
Dropbox for example has their own proxy settings within the Dropbox client. There you have to configure Fiddler as proxy.
Bitdefender also seem to have it's own proxy settings where you have to configure Fiddler.
After my discussion with Robert, I ended up abandoning Fiddler, setting up a VirtualBox VM running pfSense Community Edition (free) + Squid3 with HTTPS Interception and Access Logging, installing the pfSense's root CA certificate in my test Windows VM, and changing my test Windows VM's default gateway to the LAN IP address of the pfSense which worked.
In the case of the Dropbox example, it was initially logging TCP_TUNNEL_ABORTED/200 client.dropbox.com:443 so I added client.dropbox.com to the whitelist in the ACLs then it worked and I could see the full EXE URL:

Mitm proxy doesn't capture windows universal app ssl traffic

As the title says, I couldn't get mitm proxy to log ssl traffic of windows apps.
I tested an app working with ssl on both Android and Windows + Windows mobile.
Even in fiddler, I exempted the app but it couldn't track the requests either.
as I was searching I saw someone using a program (I couldn't find) to track the requests from a process called WinUAPEntry.exe that's used by universal apps for requests.
Any solutions?
I have installed the mitm proxy's ssl cerifitcaion
I have set the wifi proxy to the ip of the device where mitmproxy is running
I have forwarded the 80, 443 in iptables as mentioned in mitmproxy tutorials
You should be able to get this running with https://loopback.codeplex.com/. This is the same as Fiddler's EnableLoopback Utility though, so if that didn't work YMMV.
Searching a month I found out Windows Apps bypass proxy settings, tested on both Desktop and Mobile. I came up with solutions like MAC IP binding and setting NIC Ip of the host as a gateway but none worked.

Not able to access TFS on Windows 10

I'm trying to reach a TFS server (either via VS2015 or Web) from my Windows 10 dev box with no luck. I keep getting timeout error
This server is on a remote network that I access via VPN.
I've tried on different Win10 boxes, and it is the same problem.
People in the local network (no vpn) also tried on Windows 10 with no luck
If I access the server on a Windows 7 dev box, everything is OK.
I am able to access a different TFS server (located on my domain network) correctly; same port and protocol.
I disabled the computer firewall
Any clue?
Try to use the IP Address such as http://xxx.xxx.xx.xx:8080/tfs instead of http://compandyname:8080/tfs

Unable to connect to a subversion edge server remotely

I have the following configuration:
Windows 7 Enterprise x64 Host running VMWare Workstation v11.0.0 build 2305329
Client (VM) is Windows Server 2008 r2 x64
Symantec Endpoint Protection client (unmanaged) v12.1.5337.5000
using Collabnet Subversion Edge v5.0.1-4144.7
I can connect to subversion's admin port of 3343/4434 from the host computer, however when attempting to connect to the client from two external servers, I get page cannot be displayed. I can connect to the default web port of 80 and get the default IIS 7 page.
I think this may be a firewall configuration situation, however I have tried opening all tcp/udp ports in both windows firewall rules and SEP rules and I still am unable to connect.
I might be able to get it working if I install TFS on port 8080 and uninstall TFS. But I really would rather not.
Check the Advanced/Profiles section of the firewall rule for "CollabNet Subversion Edge Console". This defaults to Public but you many need Domain and/or Private too.

Windows 7 running as server

I'm developing a program using Windows 7. There are WCF services (soap, rest) that are used by currently by Silverlight but very soon I'll start development of the mobile application that would make use of these services.
On day to day basis I use Mac and Apache to host my website, but during the development of this program I would like to use IIS7 to put my services online. I have absolutely no problems to access all the services via localhost but as soon as I'm trying to connect through the internet I get "The connection has timed out".
I'm sure that my router is configured right as it works perfectly fine when I'm on Mac OS, but it looks like Windows simply blocks incoming connections from outside; I cannot even connect from another computer on the same network.
So is there a way of using Windows 7 as server with IIS7 or is it only possible with Windows Server? I know it might be like enabling/disabling one setting somewhere but I just cannot find it.
Please help.
By default, the Windows 7 firewall doesn't have a port 80 exception for IIS, you will need to either add an exception or disable the firewall to be able to connect from another machine.
Windows has a built-in firewall that is probably blocking the connections. Type "firewall" into the control panel search box to find the settings to allow stuff through/turn it off completely.

Resources