Newspaper Logo
 

http://blogx.co.uk/Newspaper.asp

The BlogX Chronicles
21/05/2013

BlogX on Windows Server 2008 R2 and IIS 7 Session Cookie Loss

I have been meaning to make this post for a while, but quite a lot has been happening. I have, however, been receiving e-mails from users that would probably appreciate this being documented:

I recently moved the blog to a Windows Server 2008 R2 host and I experienced an issue with session cookies being killed prematurely therefore preventing me from logging into the administration panel.

It turns out in IIS 7 (and ergo IIS 7.5) they changed the way sessions are handled when you go from an unencrypted (HTTP) request to an encrypted request (HTTPS) so that the existing session is now abandoned (the idea is that your application's likely private pages are segregated from the rest of your site) turning this off stopped it from dumping the sessions.

Do you use any HTTPS:// URLs on your site? If so then you may find ASP's session cookies get abandoned in seemingly random scenarios.

Fortunately you can turn this behaviour off, the option to control this is under the site's "ASP" option in IIS and then expanding "Session properties" and toggling "New ID on Secure Connection".

BlogX jumps around from HTTPS to HTTP when it feels it is appropriate to (if your site is elsewhere using SSL and you click a BlogX link then regardless of BlogX's SSL options it will often redirect to HTTP), this can destroy existing session data.

Wireshark shows only incoming packets (not outgoing) with Forefront TMG

I spent ages trying to diagnose why Wireshark was unable to capture outbound packets when I finally found this page : http://ask.wireshark.org/questions/11714/only-inbound-traffic. Looks like a Forefront TMG problem that was not present in ISA 2004. This is only an issue when performing a Forefront TMG host packet capture on the external network adapter (internal seems fine).

This blog post exists so that other users searching Google for things like "Forefront TMG Wireshark No Responses" may find it quicker.

I suspect if I install an additional network card, unbind the Forefront filter from it and mirror the port that I should be able to see the traffic correctly again.

iPhone and Asterisk (/SIP) for free phone calls

After hooking up another Android mobile phone to my Asterisk based phone system that allows free calls so long as the device is connected to wireless internet (WiFi), I knew the next question was going to be "Can I like make my iPhone work with your phone system for free too?".

Well after some research it appears that SIP support on iPhone has only really been done well by a small number of applications (and support for inbound calls may be a little patchy due to a limitation in iOS about what applications can run in the background).

3CXPhone - VoIP / SIP Softphone by 3CX Ltd. was the most (and recently) cited application that people seem to be using and recommending without needing to hack their phones.

Those willing to pay however may find these applications to provide a more polished solution (and maybe even video call support):
Bria - VoIP SIP Phone with Video and Messaging by CounterPath Corporation
Acrobits Softphone - SIP phone for VoIP calls by Acrobits

As for the best way to do this in Android? Well that is best provided by the phone itself. It is far better to use the Internet Calling functionality that comes with Android 2.3 and above (see the heading "Internet calling" in the Android Gingerbread (2.3) Release Notes), rather than waste space and memory resources installing a third party application.

Random Photo

Not an entry image : EntryMain_2353.jpg

Have a suggestion on what should go in the BlogX press? Contact our team of editors
Content © 2013 Matthew Roberts