1 Whats new in version 1.0 ?

1.1   The missing tag handler for DefineButtonSound has been added.

1.2   A beta version of an ICAP server has been added. 
      The server only supports SQuid3 so far and is a commandline tool.
      The ICAP server is implemented as proof of concept to show how 
      Blitzableiter proxy integration can be accomplished. If you want 
      to integrate the ICAP server into your network contact us.

1.3   Stability for the browser and the commandline version has been improved.


2 Installation

2.1 Blitzableiter ICAP
    
      The server has to be configured first. You can find the configuration file 
      in the programm directory under /Configuration/icap.config. 
      
      - Apply your desired connection settings
      - Leave the ICAP settings as they are
      - Under "Storing Files" set up your input directory and output directory
      - Under "Logging" set your log path, and select the types of log files you 
        want to write. For normal use <LogLevel>Error</LogLevel> should be 
        enough. Only enable <LogLevel>Debug</LogLevel> if you have real issues. In
        this case you should contact us and append the log files.
      - Under "Blitzableiter" set the path to the replacement file which will be 
        displayed in the clients browser if a file gets rejected. The file is part
        part of this distribution (replacement.swf)
        
      After Blitzableiter ICAP is set up you have to configure Squid to use the ICAP
      Server. Add the following lines to the your squid configuration.
      
      # icap_enable on
      # adaptation_access Blitzableiter_resp allow all
      # icap_service Blitzableiter_resp respmod_precache bypass=0 icap://[ipaddress]:[port]/response
      
      Squid now should send all responses to the Blitzableiter server which filters them by MIME type.
      The server will send "204 No Content" if the response is out of scope (not a Flash MIME type) and
      returns "200 OK" with the nomalized content appended if response was any of the provided MIME type.
      
      Note :
      
      Squids ICAP client sends the complete Http Request AND Http Response to the ICAP server.
      This may contain private data like cookies and session ids. 
      

2.1 Blitzableiter Commandline

      Using the command line tool is self explaining. Just put the binaries into a directory and then call them.

2.1 Blitzableiter Browser

      For using Blitzableiter in your browser you need Mozilla Firefox and the NoScript extension.
      
      - Open the NoScript settings -> Advanced -> External Filters
      - Check the "Activate Exrternal Filters" box
      - Specify the MIME types : shockwave|futuresplash
      - Add a reference to the directory where you put bb.exe from the Blitzableiter-1.0-BrowserBinaries.zip

      THE BLITZABLEITER BROWSER BINARY SENDS ERROR REPORTS TO RECURITY LABS WHENEVER AN EXCEPTION OCCURS IN THE 
      BINARY. THE ERROR REPORT CONTAINS THE URL AND THE EXCEPTION TEXT (STACK TRACE) TO MAKE THE ERROR REPRODUCABLE.
      YOU CAN CALL "bb.exe -reporting" TO TOGGLE ERROR REPORTING. A POPUP WILL SHOW YOU WHETHER REPORTING IS ON OR OFF
      AFTER THE OPERATION.

3 Questions and Bugs

    If you have any questions regarding Blitzableiter integration / implementation 
    or feature requests feel free to write an email to robert@recurity.com.

    Please report bugs as you find them and help us improving Blitzableiter.