Child Item

Update behind socks proxy

Hi,
I have Dropbox 27.4.22 on Windows 7.
I have it connected via socks5 proxy. Direct call to dropbox.com is blocked on company firewall.

Update procvess will NOT go thru dropbox app, instead I have fileopen request to:
file:///C:/users/.../appdata/local/temp/dbxlatk7ns.html#

This file openet at browser with proxy (without it will NOT load, its dropbox.com redirect)
and open an installer: https://www.dropbox.com/downloading?from_client=True

But also, this install will fail, because it's not using Socks proxy.

Well, why is Dropbox aboiding proxy setting and why is trying to connect directly to Dropbox.com? Automatic update can never be done in this way (with proxy required envirement).

Find more posts tagged with

Setting Up the Apps

Spam

Accepted answers

xsoft

Ok.

Long story short.
1) Windows Dropbox client can't do update via SOCKS proxy.
2) Official Dropbox client (from dropbox page) can't update via SOCKS proxy either.
3) direct Dropbox.com site is blocked

No solution or message "accepted as a bug.. " from Dropbox side.

So there is my NON-official solution:

** HOW TO INSTALL DROPBOX BEHIND SOCKS PROXY **
(aka when Firewall or when provider is blocking dropbox.com)

-- disclaimer --
1) it is NOT official
2) sure, there can be a virus or malware inside
3) (not, I'm not detecting any of those)
4) but you are on your own, I'm not taking (and can't take) responsibility for this
---------------

Solution:Install via this link: [link removed]

It's repacked Dropbox client from another source (which is most likely not blocked).
If you had Dropbox before, it's just update.

Thanks. Bye.
(next time I'll reconsider submitting a bug)

apraetor

Sorry for the delay, @xsoft; I have a copy of Dropbox running through a PuTTY SSH tunnel with dynamic tunnelling enabled, but as there has not been another update yet I cannot verify it updated.

However, as a work-around, you can always download a full version (from: Help Center) of the Dropbox installer instead of the web installer. Your nanite solution also works, although I would caution against using unknown third parties to package executables, particularly those which will be granted administrator permissions for an installation.

As far as filing a bug report, this is the Dropbox Forum. If you wish to file a bug report, you can do so from dropbox.com/support. Regardless, I am going to leave this copy of the Dropbox PC client running through the PuTTY tunnel until the next update is released and will follow up here.

Thanks!

All comments

Jane

@xsoft let's look into that together, apologies for getting back to you in delay!

Probably the Firewall has been blocking your connection and the Proxy can't get through. Could you have a look at the following as a first step?

Allow Dropbox (Dropbox.exe and DropboxUpdate.exe) access to ports 80 (HTTP) and 443 (HTTPS)
Add dropbox.com to the list of approved websites for your firewall, and make sure that it isn’t blacklisted.
Allow *.dropbox and other Dropbox domains to access the internet.

And then check these details?

Then, you may use this link below to the offline installer:

https://www.dropbox.com/downloading?plat=win&type=full (Windows)

Please keep me updated if this persists!

xsoft

Hi.

Please read my 1st post.

I'll say ut again - YES, our firewall is blicking all in/out comming request on all ports, all protocols on all Dropbox IP. That is why this issue is about socks/proxy server.

Update wont use this setting neither installer.

Any tips why internal dropbox update dont go thru this line?

( tups about downloading installer elsewhere wont solve this issue )

apraetor

Just to clarify, you have the Dropbox client properly configured to use a SOCKS proxy, and it syncs properly.. but the client fails to automatically update because the internal updater is ignoring the Dropbox client's SOCKS proxy setting?

Have you also configured Windows itself to properly use the SOCKS proxy? I wonder if when the Dropbox client goes to download updates it is trying to use system proxy settings, rather than the ones specified within the Dropbox client. The procedure for setting proxies both globally in Windows and specifically in Dropbox can be found here. Please ensure both System Settings and Dropbox have the proxy info.

xsoft

Hi,
yes. Dropbox client works and sync files properly. Via socks5 server configured within Dropbox client setting
(tunnel is made via PuTTy, SSH -> socks .. clasic Linux stuff). It's working like this several months.

And yes, update (withing Dropbox client) is NOT accepting (using) this setting.

Note that I dont have setting at IE (Im not using this). Also all other internet trafic goes directly.

So to "Have you also configured Windows itself to properly use the SOCKS proxy" well .. yes.
With setting to take all trafic thru socks server .. I guess installer will work properly. But there is no point to do so. All trafic goes directly just dropbox should go in another way (thru socks server).

apraetor

Ok, so you're taking advantage of SSH providing SOCKS5 support/transport. From the fact you are using PuTTY, I assume you're using Windows.

I realize you don't use IE, but the proxy settings accessible through IE are the same as in Control Panel -> Networking. Windows software, such as other browsers, etc, can use that setting. It's possible that, for some reason, the Dropbox updater is trying to use that preference rather than the one specified within the Dropbox client itself. It would be helpful for troubleshooting if you can confirm the proxy settings are set there, as well.

Or did I misunderstand? Did you say that setting a global socks proxy as I suggested DOES resolve the issue? If so, then the problem is an actual bug in the Dropbox client.

xsoft

Hi,

(sorry for not mentioning: Windows 7 PRO, SP1).

I'm reporting this because Dropbox client (windows version, outdated) is saying that "You're using and old version of Dropbox. Please update within the next 5 days to continue using Dropbox". Also that automatic update here is NOT working. This issue is about bug report that this update is NOT working. My assume is that Dropbox update part is not taking / no using socks setting from client, and trying to update in direct, which will fail (firewall block).

I just guess that setting socks server to global (IE setting) will make updater working. But I have no issue about getting over this (I can update by downloading client somewhere else ..). My point is to report this bug.

That's why I must say that NO - this (global socks setting) will not resolve this issue (aka it will not solve this bug). It's just workaround.

apraetor

Right, but if the global SOCKS setting lets it successfully update then that is useful information. It means the Dropbox updater is reading settings from the wrong location. On the other hand, if the global setting doesn't allow it to update successfully, then the Dropbox updater isn't reading proxy settings at all. Knowing which of those two scenarios is taking place will allow developers to determine the cause. The updater and client itself are two separate processes.

If you cannot confirm whether global settings -- as a work-around -- resolve the issue then I will set up a virtual machine and do the testing myself. We need to know which case it is, if we want Dropbox to be able to escalate and quickly address the problem.

xsoft

Ok, I'll try.

file:///C:/users/..../appdata/local/temp/dbxlqzzara.html# (source is Dropbox client)
no SOCKS: just white page, spinning wheel, then ERR_CONNECTION_TIMED_OUT
with SOCKS: "We're now downloading Dropbox" and link to https://www.dropbox.com/download?plat=win

----

Dropbox Installer: Connecting to Internet ...
(with SOCKS)

no responze od app after 4 minnutes (app will freeze with text "Show me help for this issue")

----

So NOPE.
Using SOCKS server on global level (at IE) will NOT work as work-around for this issue. It will take you one step further, but stucks on second step. (read as: there are now two issues)

apraetor

Thank you. I'm going to try replicating this issue tonight. Do you have any firewall logging enabled? I am curious to determine whether:

attempts to connect are being made outside the SOCKS tunnel and are being blocked by your local firewall, or
attempts to connect are going through the SOCKS tunnel and being dropped/blocked at the other end for some reason.

Another question:

Your machine is clearly set up to block outbound traffic that isn't going through the SOCKS proxy; are you blocking DNS, as well? It's not good behavior, but many programs ignore SOCKS for DNS resolution; it would be interesting if you could unblock DNS locally (assuming it's blocked) and see whether Dropbox suddenly updates properly.

I realize this is a lot of work on your end, but if we can go to Dropbox with a report that SOCKS proxies fail under specific, reproducible circumstances then they will be much better-positioned to address the issue. I'm sure they care about all reports of product failures, but simply telling them "SOCKS proxies don't update properly" won't give them much to go on. Thanks for bearing with me!

xsoft

Hello,

A = my computer

B = firewall/gateway at company

C = computer outside comp. network

A -------> B#fw ---> (internet)       //connection to internet, all trafic
A --SSH--> C ------> (internet)

Dropbox client have SOCKS5 to "C".

Computer A and C dont have any restrictions on firewall. (so no, there is no firewall on local maching with dropbox client)

At B there is DROP rule to all IP of Dropbox

DROPBOX="162.125.0.0/16,64.124.102.192/29,199.47.216.0/22,108.160.160.0/20,205.189.0.0/24,209.99.70.0/24,45.58.64.0/20,208.185.144.160/27,185.45.8.0/22"

That means A (directly) can PING dropbox.com, tan telnet to 80 or 443.

But DNS is possible. PING (and NSLOOKUP) will get IP of dropbox.com (162.125.248.1), but cant ping anything because of DROP rule (ping will return connection timeout).

xsoft

And 7 days are out.

"You're using an old version of Dropbox. Please update to the latest verstion to continue using Dropbox"
Update is not possible to do. SOCKS setting from Dropbox or IE (global) will not work there. Firewall rule can't be deleted ... that means .. game over :-(

xsoft

apraetor

Sorry for the delay, @xsoft; I have a copy of Dropbox running through a PuTTY SSH tunnel with dynamic tunnelling enabled, but as there has not been another update yet I cannot verify it updated.

Thanks!

Jane

Hey @xsoft,

This is just a brilliant workaround, thanks for posting this here, it'll definitely help a lot of users connecting through a VPN!

Much appreciated indeed! :upside_down: :tools: :gear:

apraetor

@xsoft Hey, sorry for the delay -- Dropbox just pushed a new update to my client last night. I wanted to confirm that SOCKS5 via PuTTY SSH do update properly. My sandbox client successfully updated from 34.3.19 to 35.3.15. If you are still having issues with SOCKS5 please fill out a support request here.

xsoft

Hello, thanks - I will.

Since Im still on version 33.4.23 (from last manual update mentioned previously).

It is still NOT working. Sorry.

Note: version 33.4.23, windows 7pro, dropbox client restarted.
(this is BETA release right?) never mind, I had and have turned ON early releases.
https://www.dropboxforum.com/t5/Desktop-client-builds/Beta-Build-35-3-15/td-p/241307

Mousehover on Dropbox client whos also: "Dropbox 33.4.23, Up to date"

apraetor

I realize it isn't working for you. But since it is working generally, this is something that is going to require investigation into the personal details of your setup to identify the root cause. That is why I suggested submitting a support request to Dropbox.

xsoft

It is kinda strange that it's not working on my side but it's workign on yours.

Are you sure you block your firewall properly?

Like with DROP rule on all IP range for Dropbox? (DNS is allowed).
Setup just at Dropbox client, not IE.

(note: report submited as suggested).

apraetor

It's running in a virtual machine with no internet access, only virtual lan access to the host (i.e. no NAT is provided at all). The host is running PuTTY with dynamic tunneling. The VM uses the host's lan ip as the SOCKS5 proxy server address.

Sanchez

Hi @apraetor & @xsoft,

Would you mind taking a minute of your time to fill out a survey sharing your experience using our Dropbox Community? You can access the survey here: http://bit.ly/2lNKIxT

We sure would appreciate it!

Hey xsoft

We're not 100% comfortable with this modified version of the client (and it could contain all sorts of things that we can't verify or support) so we took the link down to prevent any issues.

Don't want to make it look like we're censoring content (I'm all in favor of workarounds to get things to work) but we also want to make sure they are not harmful / hacks that could cause any issues.

Hope you understand !

Cheers

xsoft

Hello,
Yes, you are right. There can be anything since it's not directly from you (Dropbox web).
That's why I attached that note, that there can be anything dangerous.

Note: this will also works with this (full offline verion) linke (directly from you - aka clean):
https://www.dropbox.com/downloading?plat=win&type=full

It's a bit sad, that I can't find this quickly when online version fails.

Btw I'm still working on this issue with your support team, so install behind SOCKS proxy is not solved wet.

Lucio

By design, the Dropbox Update process is separate from the client and does not have access to the client's preferences, it uses the Windows OS network preferences rather than the Dropbox desktop application's proxy settings.