Iron Speed Technical Forums
Sign up Latest Topics
 
 
 


Reply
  Author   Comment   Page 3 of 6      Prev   1   2   3   4   5   6   Next
JimiJ

Avatar / Picture

MVP Developer
Registered:
Posts: 1,962
Reply with quote  #31 
LicenseFix.png 

__________________

  Jaime Jegonia
[jts_logo]

Iron Speed MVP Developer
 

". . . and whoever sows generously will also reap generously" 2 Cor 9:6

krishna

Registered:
Posts: 145
Reply with quote  #32 
nah, it checks for licensing even while compiling.

that is how my 'extinction level event' happened yesterday.

I was not on internet while starting ISD; after opening the app
I connected to the internet. Then sometime after, when I clicked 
build button, it went off.




JBEMETO

Registered:
Posts: 165
Reply with quote  #33 
Still can not register with or without internet.

I intend to uninstall ISD but will not know the consequences this time around.


__________________
JBEMETO
JBEMETO

Registered:
Posts: 165
Reply with quote  #34 

Hello Jimi.
Thanks for the direction.

It got me out of the waters.

Thank you.


__________________
JBEMETO
manzar

Avatar / Picture

Registered:
Posts: 15
Reply with quote  #35 
Seems like the server is back again, I was able to re-register. 
To avoid issue related to server unavailability in the future, I am blocking ISD through firewall, lets see how it goes. 

__________________
Thanks & Regards,
[Signature]
bowskill

Registered:
Posts: 60
Reply with quote  #36 
Hi folks,

I just read this thread. I can confirm that I have been using the windows firewall method to stop Designer from accessing the Internet and I had no problems using it the last couple of days. I was unaware you were all having problems with the license server until just now.

Best you all try the same method if you don't want to have a heart attack once a month. You have to do this while Designer is working. If you wait until the next problem, it is too late.

John
Dwight

Registered:
Posts: 20
Reply with quote  #37 
Quote:
Originally Posted by bowskill
Hi folks,

I just read this thread. I can confirm that I have been using the windows firewall method to stop Designer from accessing the Internet and I had no problems using it the last couple of days. I was unaware you were all having problems with the license server until just now.

Best you all try the same method if you don't want to have a heart attack once a month. You have to do this while Designer is working. If you wait until the next problem, it is too late.

John


Can you confirm you were actually using it (doing a build or run Application or a start up) when the sever was down (approx. 7:15 - 10:45 eastern standard time).

If you were not using it when the server was down it would not have affected you. Even if you had it open and were using it, you may not have been affected unless you did a build or were trying to start ISD up during that time.

Dwight
porphi

Registered:
Posts: 648
Reply with quote  #38 
I would be surprised if the firewall block would work. I'm sure everyone notices that the designer request to runas administrator. There is a reason for this besides general operations. Easy enough to tell though, start fiddler, then start the designer and monitor the network traffic. 
__________________
Thank you,
Phil Porter
PPG&A, INC.
pporter@ppgainc.com
http://www.ppgainc.com
https://rapidsprout.com
678-362-2035
bowskill

Registered:
Posts: 60
Reply with quote  #39 
Dwight,

If it was only down for a few hours then no I can't be certain. I guess it is possible that Designer uses some other service (other than the two Designer.exe's) to do the license check. Maybe if someone here has the skill to do a network trace when Designer starts up then we could find out.

I have noticed that since implementing the firewall block Designer sometimes pauses for a while at startup before seeming to give up on the Internet and then continues normally.

John
miles

Avatar / Picture

MVP Consultant
Registered:
Posts: 1,686
Reply with quote  #40 
Hi John/Dwight,

Since implementing the firewall rules, Iron Speed loads almost instantly, which is great.  I can only hope that it is actually working given that the licensing server is back up again.

The easy but annoying solution is to unplug your ethernet cable or turn off wifi before loading ISD.  Hopefully this firewall rule solution really does work..

HTH,

__________________
Miles Gibson, MScIS
Iron Speed MVP
Senior Consultant, Principal
Milestone Software Inc.

http://www.ironspeedmvp.com\localizer 
Email: miles@milestone.ca
Milestone Localizer: Full Localization for your Iron Speed applications!
Dwight

Registered:
Posts: 20
Reply with quote  #41 
Hi Miles/John

The problem with unplugging is that it also seems to check the license server when you build a project or run the project that you are working on.

That's what happened to me the last three times it was down. Each time i tried to build, it would compile with an error message of "Thank you for using Iron Speed"


Dwight
bowskill

Registered:
Posts: 60
Reply with quote  #42 

Quote:
Originally Posted by porphi
I would be surprised if the firewall block would work. I'm sure everyone notices that the designer request to runas administrator. There is a reason for this besides general operations. Easy enough to tell though, start fiddler, then start the designer and monitor the network traffic. 


Phil,

Great tip on Fiddler. I am a Telerik subscriber but never knew about this really useful tool. 

I tried it out on my laptop - which has my second licensed installation of Ironspeed Designer but no firewall rules implemented. It is very interesting to see what happens when you start up the Designer application. 57 network connections get made, most of which I believe are to do with loading the "home" page. However, number 3 on the list is this entry:

POST http://acs.ironspeed.com/AcS/Activate/ActivationServer.asmx

Included in the body of the SOAP request is my License key in plain text plus various details of my installation - machine name, IP address, OS etc.

Included in the response is a "Thank you for using Iron Speed Designer" message and some kind of encrypted key.

You can inspect the web service yourself by going to http://acs.ironspeed.com/acs/activate/activationserver.asmx.

The process that makes each and every one of the 57 network connections is listed by Fiddler as "designer:9528". Task manager tells me "designer" is Designer.exe.

So, this leads me to believe that the firewall rules I previously suggested should work. I tried to create a simpler rule that would just block access to acs.ironspeed.com. But I cannot see a way of doing it with windows firewall. I also thought of blocking the IP address of the activation server but that wont be useful because acs.ironspeed.com and http://www.ironspeed.com share the same IP address so this website would be blocked. Blocking the port 9528 wont work as it used a different port every time.

The only question remaining for me is whether the local license activation is set to expire after a period of time without "refreshing" from the activation server. I hope not!

John

PS - in case anyone else tries this experiment, one thing to note is that while using Fiddler, all your network traffic is passing through it. Therefore the previously mentioned Ironspeed firewall rules will not appear to work. This is because network access to the activation server is not coming from Designer.exe - it is coming from Fiddler so Windows Firewall will not block it. Turn Fiddler off and they work again. You can verify this by observing the "home" page in Designer. With firewall rules on and Fiddler on you get the normal landing page. With firewall rules on and Fiddler off you get a different page.


porphi

Registered:
Posts: 648
Reply with quote  #43 
Quote:
So, this leads me to believe that the firewall rules I previously suggested should work.


I guess no one read my previous post or I didn't explain it well enough. ISD is running in administrator mode which allows it to modify your system settings. Basically it's allowed to do what every it want's with the system including making sure it has access through the firewall.

Quote:
This is because network access to the activation server is not coming from Designer.exe - it is coming from Fiddler


Fiddler is not rerouting (managing) the network traffic it's capturing (sniffing) network activity and displaying it.

__________________
Thank you,
Phil Porter
PPG&A, INC.
pporter@ppgainc.com
http://www.ppgainc.com
https://rapidsprout.com
678-362-2035
bowskill

Registered:
Posts: 60
Reply with quote  #44 
Phil you probably know more about networks, firewalls and security than me but I am not sure that you are right that a program running under Administrator privilege is immune to Windows Firewall rules. Can you authoritatively state this as fact? (If true then yeh - the firewall plan goes up in smoke.)

I agree it could change firewall rules. But the program has to know what to change. 

My assumption that Fiddler becomes the origin of outbound network data in the eyes of the Firewall is based on the observation that the behaviour of Designer changes depending upon whether Fiddler is on or off. It could be an erroneous assumption but it makes sense that in the eyes of the firewall, Fiddler places itself inside the chain of data packet transmission, not to the side of it. Therefore to the firewall, the origin of each packet is Fiddler not Designer and so the program specific firewall rules cease to apply.

Am I wrong?
bowskill

Registered:
Posts: 60
Reply with quote  #45 
Sorry to labour the point but here is what I mean about the Fiddler interaction with the Firewall and how it changes the behaviour of Designer.

Firewall-OFF-Fiddler-OFF.jpg
Firewall-ON-Fiddler-OFF.jpg
Firewall-ON-Fiddler-ON.jpg     

Previous Topic | Next Topic
Print
Reply

Quick Navigation:

Easily create a Forum Website with Website Toolbox.

Download Iron Speed Designer

Terms of Service Privacy Statement