History

Quick Start Guide

Using it with Mozilla Firefox and NoScript

  1. Dowload the latest Blitzableiter browser binaries.
  2. Put it in a directory of your choice.
  3. Open your Firefox, click on the NoScript symbol and choose "Settings".
  4. Click the "Advanced" tab.
  5. Check the "Enable external filters" box.
  6. Enter "shockwave|futuresplash" as content type.
  7. As "Executable file" select the Blitzableiter binary that you downloaded before.
  8. Select the domains you do not want to filter ".youtube.com" e.g.
    private
    Blitzableiter should now be ready to use. Whenever a Flash file appears on a site you are visiting, NoScript passes this file to Blitzableiter. If it is a well formed Flash file, Blitzableiter returns it to NoScript. If not a custom Flash file containing error information will be displayed.

Using it with the ICAP server

In order to use the Blitzableiter ICAP service you need a Squid3 (or another ICAP enabled proxy) which sends the SWF files to Blitzableiter.

Getting Blitzableiter

  1. Dowload the latest Blitzableiter ICAP binaries.
  2. Put it in a directory of your choice.

Configuring Blitzableiter

The Blitzableiter ICAP server has to be configured first. You can find the configuration file in the program directory under /Configuration/icap.config.

  1. Apply your desired connections settingsprivate
  2. Leave the ICAP settings as they are
  3. Under "Storing Files" set your inputdirectory and outputdirectory
  4. Under "Logging" set your log path, and select the types of log files you want to get written. For normal use <LogLevel>Error</LogLevel> should be enough. Only enable <LogLevel>Debug</LogLevel> is you have real issues. In this case you should contact us and append the log files.
  5. Under "Blitzableiter" set the path to the replacement file which will be displayed in the clients browser if the file gets rejected. The file is part part of this distribution (replacement.swf)

When using the ICAP server on a Windows host, you have to have the .NET framework installed.
In order to start the ICAP service under Linux you have to have the Mono framework installed.
With Ubuntu for instance it can be installed via:

  apt-get install mono-runtime

Now Blitzableiter can be started by invoking

  ricaps.exe

Configuring Squid

After Blitzableiter ICAP is set up you have to configure Squid to use the ICAP Server. Add the following lines to the your squid configuration.
  icap_enable on 
  icap_send_client_ip off 
  icap_send_client_username off 
  icap_service Blitzableiter respmod_precache bypass=1 icap://IP:PORT/response 
  acl acl_flash rep_mime_type shockwave|futuresplah 
  adaptation_access Blitzableiter allow acl_flash

After a restart Squid now should send all responses with mime type shockwave or futuresplash to the Blitzableiter ICAP server which filters them.

Note

Squids ICAP client sends the complete HTTP Request and HTTP Response to the ICAP server.
This may contain sensitive data like cookies and session IDs. Keep that in mind.

Also available in: HTML TXT