Outpost with Grabit - Strange bug

[Crafton]

I'm currently testing a beta software from :
http://www.shemes.com/community/viewtopic.php?t=4919

I added this software to "Trusted Application"

This software implement a usenet search module.
The search module works ok only if Outpost is "Quitted and Shutdowned"

The search module seems to download some information, but seems not to detect "End of Transmission"

It seems does Outpost change the behaviour of one of the network Layers.

I thinks that DISABLED outpost should not change any behaviour ! :mad:

So what's wrong ???

Thanks for reply ...

PS : i also made some test with an old 1.0 version, the behaviour is the same :eek:

[chrisclu]

What version of Outpost are you using? What OS? What do the blocked and active content logs show? What kind of software is grabit?
Chris

[Crafton]

I use the latest Outpost 2.1.303 (314), WinXP Pro. This also happen on win2K with Outpost 1.0 Free. Grabit is a usenet binary grabber
Blocked and active content logs does not show anything.
I repeat : the problem appear even is outpost is set to disabled, the only to have the good behaviour is to shutdown outpost.
Is there some filtering made even is outpost is set to disabled ?

Thanks for interest

[ramponge]

Hi Crafton

Have you tried with the previous version of GrabIt (1.4.7) ?

I'm also with Outpost 2.1.303 (314) and WinXP Pro and it works fine for me, maybe the version 1.5.0 is not stable as they say...

[Crafton]

Thx for reply ramponge, Grabit works well, this is just the New Search function (1.5.0) that seems to not work with outpost

[lucid]

I have to concur with Crafton. I'm getting the EXACT same problem. Everything with Grabit works fine except the search (possibly the grooviest feature Grabit has to offer). Like Crafton, only shutting down outpost seem to fix the issue. Nothing seems to appear in the logs as being blocked, so I'm not sure what's happening. I've checked the Grabit forums and there are a few rumblings of the same issue without specifics regarding the firewall. If any Outpost gurus have a little time to help us out it would be much appreciated. Grabit is a free download at www.shemes.com.

[Paranoid2000]

Two suggestions: Check the Outpost Attack Detection, Component Control and Alerts Tracker logs for any GrabIt-related entries (or anything reported at the same time as the failed search) and post the results here. Make GrabIt a Partially Trusted application - Fully Trusted does not seem to work with applications requiring incoming connections (P2P programs seem to be the best example of this) and if GrabIt's Search function involves such a connection then a separate rule for it may be needed.

[CyGho]

I can confirm the same thing. Only shutting down Outpost does the trick. I tried about everything like stopping all plugins, fooling around with every System rule, ICMP setting etc. Tried Partially Allowed and Trusted Grabit. Nothing in any log whatsoever, with any setting.
Beats me this time.........(for now that is :))

Using Grabit 1.51 beta build 888 (witch is a great program btw)

[Crafton]

I have remade some test, with the latest build (2.5.375.4822 (374) )
completely reinstalled with default rulez, put default for grabit (Email-client)
The search feature using port 119 (nntp), but the behaviour is still the same.
When using the search feature :
Grabit make a connection to a remote host on 119, get some information, then
seems not to see the "end of transmission" so don't display the search result :(
i have to make my search completely "nudes" on the net ;) and grabit works

[Crafton]

I have found a solution involving socks-"ification" of grabit
this involve two software :
- Sockscap available at http://www.socks.permeo.com/
- Bouncer 1.0RC6 available at http://www.softpedia.com/progDownload/Bouncer-for-Windows--RC-Download-454.html

I run Bouncer as a Sock5 proxy , sockifie Grabit to pass trought Bouncer, apply the good rules for the two software, and finally the search function works like a charm :p

[CyGho]

Hi Crafton,
Good to see that you have things working for you.
But I'm not goin to install 2 (or any) programs just for passing a firewall witch should allow this traffic in the first place.

[Crafton]

Yes i admit it this is not very convinient, and i just found that u need a second pc to install the proxy else it does the same :s
So my solution sucks a bit. Developpers should drop an eye on this problem.

[greenboy]

Having the same problem with Grabit search. Has anyone found a solution?

Thanks

GB

[antiserious]

... well, I'm new to Outpost (free) and I'm having the same problem with the search in Grabit - which is a great feature, btw ... I sure hope someone can figure out a setup that will work ... Grabit just went to v 1.5.2 beta today, same glitch ... rest of the program works fine ...

... at least this will serve to bump the thread ...

[Crafton]

Just a Post to link the problem with the thread in the Grabit forum
Hope this can help
Grabit Forum (http://www.shemes.com/community/viewtopic.php?t=5895)

[antiserious]

... nobody has any ideas/input/thoughts on this ? ...

... hmmm ...

[chrisclu]

I know nothing of grabbit, but since you all mentioned port 119, a thought occured to me.
Check your news reader rules (port119) in your email app. Perhaps that rule limits 119 traffic to a certain remote host.
Just a guess.
Chris

[Crafton]

Just have Tested Version 2.6.451.5123 (402)=>> Same Bug :mad:
Will The Developpers will take this bug in consideration one Day :confused:

[Crafton]

Hi,

I got in contact with Outpost Support they send me a debug Plugin for Outpost and Made some Test :

I Logged two session like that :

Using Grabit With Proxy outside the pc : it works
I use Freecap for proxyfing Grabit (www.freecap.ru)

I then made the same test using no proxy = does not work !
Check The log below.

I came to the conclusion that there is some http Filtering.

I made further test and found that the bug come from :
Outpost kernel/Httpfilt.dll

I renamed it , so that oupost cannot load it.
Then try to make a 'Grabit Search" => BINGO it works with outpost loaded and running in rules wizard mode !

So there is something wrong in the HTTPfilt.dll

Hope this will can help Outpost Developpers find the bug.
One Question :
Why not Running the search server on port 80 instead of 119 ?

Hope that my humble analysis will help all the outpost/grabit users.

WITH PROXY

[GrabIt.exe]: open address TCP/0.0.0.0:1172(0) [FF885E68]
[GrabIt.exe]: Unverified block port [FF885E68]
[GrabIt.exe]: unverified process learn 0.0.0.0:1172 - 192.0.0.140:65080 [FF885E68/802C7E68] 6F
[GrabIt.exe]: connect 0.0.0.0:1172 - 192.0.0.140:65080 [FF885E68/802C7E68] 0
[GrabIt.exe]: connect successfull 0.0.0.0:1172 - 192.0.0.140:65080 [FF885E68/802C7E68] 0
[GrabIt.exe]: remote disconnect 0.0.0.0:1172 - 192.0.0.140:65080 [FF885E68/802C7E68] 0
[GrabIt.exe]: open address TCP/0.0.0.0:1173(0) [FFA9CC88]
[GrabIt.exe]: Unverified block port [FFA9CC88]
[GrabIt.exe]: unverified process learn 0.0.0.0:1173 - 192.0.0.140:65080 [FFA9CC88/81118648] 6F
Close address [FF885E68]
[GrabIt.exe]: connect 0.0.0.0:1173 - 192.0.0.140:65080 [FFA9CC88/81118648] 0
[GrabIt.exe]: connect successfull 0.0.0.0:1173 - 192.0.0.140:65080 [FFA9CC88/81118648] 0
[GrabIt.exe]: remote disconnect 0.0.0.0:1173 - 192.0.0.140:65080 [FFA9CC88/81118648] 0
Close address [FFA9CC88]


Without Proxy

[GrabIt.exe]: open address TCP/0.0.0.0:1175(0) [FFAB2F88]
[GrabIt.exe]: Unverified block port [FFAB2F88]
[GrabIt.exe]: unverified process learn 0.0.0.0:1175 - 212.26.219.158:119 [FFAB2F88/FF7CD688] 6F
[GrabIt.exe]: connect 0.0.0.0:1175 - 212.26.219.158:119 [FFAB2F88/FF7CD688] 0
[GrabIt.exe]: connect successfull 0.0.0.0:1175 - 212.26.219.158:119 [FFAB2F88/FF7CD688] 0
[GrabIt.exe]: REQUEST/1.0 POST /seek.php [FF7CD688]
[GrabIt.exe]: REQUEST ARG CONNECTION keep-alive [FF7CD688]
[GrabIt.exe]: REQUEST ARG CONTENT-TYPE application/x-www-form-urlencoded [FF7CD688]
[GrabIt.exe]: REQUEST ARG CONTENT-LENGTH 3 [FF7CD688]
[GrabIt.exe]: REQUEST ARG HOST seek.shemes.com:119 [FF7CD688]
[GrabIt.exe]: REQUEST ARG ACCEPT text/html, */* [FF7CD688]
[GrabIt.exe]: REQUEST ARG ACCEPT-ENCODING gzip,deflate [FF7CD688]
[GrabIt.exe]: REQUEST ARG USER-AGENT Mozilla/3.0 (compatible; Indy Library) [FF7CD688]
[GrabIt.exe]: URL http://seek.shemes.com:119/seek.php [FF7CD688]
[GrabIt.exe]: ANSWER/1.1 200 OK [FF7CD688]
[GrabIt.exe]: ANSWER ARG DATE Fri, 15 Apr 2005 14:46:25 GMT [FF7CD688]
[GrabIt.exe]: ANSWER ARG SERVER Apache/1.3.33 (Debian GNU/Linux) mod_gzip/1.3.26.1a PHP/4.3.10-10 [FF7CD688]
[GrabIt.exe]: ANSWER ARG X-POWERED-BY PHP/4.3.10-10 [FF7CD688]
[GrabIt.exe]: ANSWER ARG CONNECTION close [FF7CD688]
[GrabIt.exe]: ANSWER ARG CONTENT-TYPE text/html; charset=iso-8859-1 [FF7CD688]
HTTP non-persistent [FF7CD688]
[GrabIt.exe]: remote disconnect 0.0.0.0:1175 - 212.26.219.158:119 [FFAB2F88/FF7CD688] 0
[GrabIt.exe]: open address TCP/0.0.0.0:1176(0) [FFAB5548]
[GrabIt.exe]: connect 0.0.0.0:1176 - 212.26.219.158:119 [FFAB5548/FF7C2748] 6F
Close address [FFAB2F88]
[GrabIt.exe]: connect successfull 0.0.0.0:1176 - 212.26.219.158:119 [FFAB5548/FF7C2748] 0
[GrabIt.exe]: REQUEST/1.0 POST /seek.php [FF7C2748]
[GrabIt.exe]: REQUEST ARG CONNECTION keep-alive [FF7C2748]
[GrabIt.exe]: REQUEST ARG CONTENT-TYPE application/x-www-form-urlencoded [FF7C2748]
[GrabIt.exe]: REQUEST ARG CONTENT-LENGTH 41 [FF7C2748]
[GrabIt.exe]: REQUEST ARG HOST seek.shemes.com:119 [FF7C2748]
[GrabIt.exe]: REQUEST ARG ACCEPT text/html, */* [FF7C2748]
[GrabIt.exe]: REQUEST ARG ACCEPT-ENCODING gzip,deflate [FF7C2748]
[GrabIt.exe]: REQUEST ARG USER-AGENT Mozilla/3.0 (compatible; Indy Library) [FF7C2748]
[GrabIt.exe]: URL http://seek.shemes.com:119/seek.php [FF7C2748]
[GrabIt.exe]: ANSWER/1.1 200 OK [FF7C2748]
[GrabIt.exe]: ANSWER ARG DATE Fri, 15 Apr 2005 14:46:25 GMT [FF7C2748]
[GrabIt.exe]: ANSWER ARG SERVER Apache/1.3.33 (Debian GNU/Linux) mod_gzip/1.3.26.1a PHP/4.3.10-10 [FF7C2748]
[GrabIt.exe]: ANSWER ARG X-POWERED-BY PHP/4.3.10-10 [FF7C2748]
[GrabIt.exe]: ANSWER ARG CONNECTION close [FF7C2748]
[GrabIt.exe]: ANSWER ARG CONTENT-TYPE text/html; charset=iso-8859-1 [FF7C2748]
HTTP non-persistent [FF7C2748]
[FF7C2748] Non-HTML file
[GrabIt.exe]: remote disconnect 0.0.0.0:1176 - 212.26.219.158:119 [FFAB5548/FF7C2748] 0
Close address [FFAB5548]


[cross Posted in Grabit Forum]

Waiting for Oupost Support Team Response

[FAKEFACTORY]

Thats interesting. I thought, Outposts Adblock.dll is the bad guy.

[antiserious]

... I can confirm (so far) that re-naming the kernel/Httpfilt.dll file SEEMS to allow the grabit search function to work through Outpost free ... :D ... I'd like to thank Crafton for all his work on this, and anyone else that contributed ...

[Lagasi]

I think I found the bug. There's a packet that gets modified by Outpost. I did a GrabIt search for "naruto 133". Outpost decodes the encoded data to ASCII.

Un-modified packet:

48 54 54 50 2F 31 2E 31 20 32 30 30 20 4F 4B 0D HTTP/1.1 200 OK.
0A 44 61 74 65 3A 20 53 61 74 2C 20 31 34 20 4D .Date: Sat, 14 M
61 79 20 32 30 30 35 20 30 31 3A 33 38 3A 35 33 ay 2005 01:38:53
20 47 4D 54 0D 0A 53 65 72 76 65 72 3A 20 41 70 GMT..Server: Ap
61 63 68 65 2F 31 2E 33 2E 33 33 20 28 44 65 62 ache/1.3.33 (Deb
69 61 6E 20 47 4E 55 2F 4C 69 6E 75 78 29 20 6D ian GNU/Linux) m
6F 64 5F 67 7A 69 70 2F 31 2E 33 2E 32 36 2E 31 od_gzip/1.3.26.1
61 20 50 48 50 2F 34 2E 33 2E 31 30 2D 31 30 0D a PHP/4.3.10-10.
0A 58 2D 50 6F 77 65 72 65 64 2D 42 79 3A 20 50 .X-Powered-By: P
48 50 2F 34 2E 33 2E 31 30 2D 31 30 0D 0A 43 6F HP/4.3.10-10..Co
6E 6E 65 63 74 69 6F 6E 3A 20 63 6C 6F 73 65 0D nnection: close.
0A 43 6F 6E 74 65 6E 74 2D 54 79 70 65 3A 20 74 .Content-Type: t
65 78 74 2F 68 74 6D 6C 3B 20 63 68 61 72 73 65 ext/html; charse
74 3D 69 73 6F 2D 38 38 35 39 2D 31 0D 0A 43 6F t=iso-8859-1..Co
6E 74 65 6E 74 2D 45 6E 63 6F 64 69 6E 67 3A 20 ntent-Encoding:
67 7A 69 70 0D 0A 43 6F 6E 74 65 6E 74 2D 4C 65 gzip..Content-Le
6E 67 74 68 3A 20 39 30 36 0D 0A 0D 0A 1F 8B 08 ngth: 906.......
00 00 00 00 00 00 03 ED D8 4D 6F DB 46 10 06 E0 .........Mo.F...
FB FE 8A 45 4E 2D 54 B3 3B B3 1F DC 25 8C C2 4D ...EN-T.;...%..M
E3 A2 B9 04 45 72 AB 20 18 2B 89 B1 D8 88 A4 40 ....Er. .+.....@
D1 01 FC EF 3B 4B 1A 28 D0 78 D1 91 D8 63 45 1E ....;K.(.x...cE.
74 10 8C C7 CB 97 F3 2E F9 A9 8E C3 EE F0 7E 94 t.............~.
5F A1 50 F2 46 FE D2 9F 9E 87 E6 F1 30 CA EF 76 _.P.F.......0..v
DF 4B 54 CA FC 20 DF 1F 63 27 3F 1D EA B6 3E 0B .KT.. ..c'?...>.
F9 FF 87 FD 11 5A A1 83 10 C4 C7 BA 92 EB 53 7F .....Z........S.
1E 37 F2 43 1C 9E C6 5E D6 A7 E6 DC EF 6B 09 5A .7.C...^.....k.Z
CB B6 19 E2 63 7D 33 D6 B1 15 F1 CB A1 96 B7 63 ....c}3........c
6C EB A1 BE 3B F4 63 1B 9B 63 B1 EB DB 9F 04 5D l...;.c..c.....]
0A 7B 93 4E 2F A1 AC 2C 56 CA D2 DF 37 46 A0 17 .{.N/..,V...7F..
20 50 C4 E3 58 6C 9B 2E 0E 4D 7D 2E 76 71 18 FB P..Xl...M}.vq..
BE 3B 17 9F 87 BA DB 1D 8A D8 35 74 F1 6E 3E C7 .;........5t.n>.
EE FC B4 2D F6 13 0C 15 5E 00 BB 6F B7 C3 6F F1 ...-....^..o..o.
0F C2 B5 7D 73 47 AC 73 DF 7D 03 43 AC B4 A9 30 ...}sG.s.}.C...0
08 70 96 54 96 60 70 19 CC 03 28 6B C5 0B 26 21 .p.T.`p...(k..&!
D6 FB 38 8E F5 36 3E F7 1B B9 56 F0 23 EA 0D C5 ..8..6>...V.#...
F4 CD FA DD DB CD C3 FC B3 07 FA D9 C3 FA 2D FC ..............-.
AA EF DF 79 BD 29 4E 71 C0 37 F2 F9 BE DB 89 6D ...y.)Nq.7.....m
FC 12 CF 87 A1 69 4F F2 F6 EF EF 77 8F AF 2C AB .....iO....w..,.
95 CA 56 D6 54 B6 14 60 82 33 02 00 BE F5 B7 4F ..V.T..`.3.....O
C7 91 C4 FB 26 CE F4 19 EC F2 60 CD 03 8F 0A 8B ....&.....`.....
21 0E D7 B2 6D A5 B4 00 34 C6 6A 52 07 6B 28 74 !...m...4.jR.k(t
66 3A 19 FA 32 AF 47 AE 1E FE 0B BD F6 01 CA A4 f:..2.G.........
77 8A AF F7 79 BD E1 EA F5 62 3D 5A EF 3C E5 3E w...y....b=Z.<.>
78 93 DC AC D4 84 BC DC 72 E5 E6 6A B9 AB 94 AA x.......r..j....
C0 25 79 50 93 DC 71 E5 74 79 B2 72 C7 95 DB 85 .%yP..q.ty.r....
72 3F 25 46 05 AB 28 31 94 1C 76 62 1C E4 F5 25 r?%F..(1..vb...%
57 EF 96 E9 B1 9C F4 3A C5 85 F2 4E FF 0C 5B 8F W......:...N..[.
79 BD E7 EA CB 25 7A 5B E9 79 D6 28 D4 6E BA 5B y....%z[.y.(.n.[
2D 5F AF F3 FA C0 D5 FB 85 7A 3B AD 7D A9 CC A4 -_.......z;.}...
37 C0 D7 9B AC 1E 14 57 1F 96 E9 CD CB DA 07 98 7......W........
D7 FE 82 DC E7 6B 15 98 B5 3A 82 5A A0 07 55 A5 .....k...:.Z..U.
01 83 06 BD 0B 29 F7 BA 44 BE 3E DF B1 C0 6D 29 .....)..D.>...m)
B8 BE A5 26 BD 4D 73 3E 58 6B 2E 9B 96 F9 7E 05 ...&.Ms>Xk....~.
EE EE 00 AE DF 1D CC F2 30 A7 46 41 98 52 73 C1 ........0.FA.Rs.
BA E7 FB 15 B8 FD 0A D7 F7 2B E9 29 F6 6E BA 63 .........+.).n.c
83 36 36 E9 AD E1 EB F3 1D 0B DC 8E 85 25 1D 0B .66..........%..
69 F9 E7 CC 03 BA 29 F3 25 5B 5F E6 7B 16 B8 3D i.....).%[_.{..=
0B 4B 7A 36 E9 69 5A AA 54 B4 1A 44 E9 9D 22 BD .Kz6.iZ.T..D..".
4A 27 43 9F EF 59 E0 F4 EC D7 FE A8 D4 8A 76 96 J'C..Y........v.
BF FF FC F1 BA FD BC AB 50 55 9A C4 80 94 79 A1 ........PU....y.
81 EA 07 FF F9 A8 F4 BA 3D DF B2 C0 69 D9 64 87 ........=...i.d.
15 ED E9 97 D9 8D 17 1E 8D 23 B6 D3 48 2D 4B 07 .........#..H-K.
C3 9E EF 58 E0 74 6C B2 EB 15 ED 2C 97 D8 A1 4A ...X.tl....,...J
7B 4A A7 0D 94 A9 B0 28 F6 22 1D 0C 7D BE 63 91 {J.....(."..}.c.
D3 B1 49 5F AE 68 77 B9 4C 8F 94 13 8A BC A6 10 ..I_.hw.L.......
83 B5 9E AE 03 1D 0C 7D BE 63 91 D3 B1 A4 07 5C .......}.c.....\
D1 1E 61 A1 BE 14 DA E9 32 04 10 58 06 C0 E9 51 ..a.....2..X...Q
DC 72 FC F9 96 45 4E CB 92 1F 61 05 7E A1 DF D2 .r...EN...a.~...
AC 41 AD 0D 6D B8 AC B5 34 FE D1 A7 93 E1 CF 77 .A..m...4......w
2D 72 BA 96 FC 3A AC F4 B2 FB 16 2B A0 1D 02 0D -r...:.....+....
FC E0 68 F6 07 AF 69 07 40 4F 29 F6 DF 86 E6 FC ..h...i.@O).....
B6 C8 09 E6 9B A2 FD 9F FD 39 76 F2 F6 E5 CB AB .........9v.....
20 2F C1 4C 43 D0 08 9F 06 F8 C5 2F 64 FE 02 F1 /.LC....../d...
90 15 90 1F 14 00 00 .......

[Lagasi]

Modified packet 1 of 4:

48 54 54 50 2F 31 2E 31 20 32 30 30 20 4F 4B 0D HTTP/1.1 200 OK.
0A 44 61 74 65 3A 20 53 61 74 2C 20 31 34 20 4D .Date: Sat, 14 M
61 79 20 32 30 30 35 20 30 31 3A 33 39 3A 34 31 ay 2005 01:39:41
20 47 4D 54 0D 0A 53 65 72 76 65 72 3A 20 41 70 GMT..Server: Ap
61 63 68 65 2F 31 2E 33 2E 33 33 20 28 44 65 62 ache/1.3.33 (Deb
69 61 6E 20 47 4E 55 2F 4C 69 6E 75 78 29 20 6D ian GNU/Linux) m
6F 64 5F 67 7A 69 70 2F 31 2E 33 2E 32 36 2E 31 od_gzip/1.3.26.1
61 20 50 48 50 2F 34 2E 33 2E 31 30 2D 31 30 0D a PHP/4.3.10-10.
0A 58 2D 50 6F 77 65 72 65 64 2D 42 79 3A 20 50 .X-Powered-By: P
48 50 2F 34 2E 33 2E 31 30 2D 31 30 0D 0A 43 6F HP/4.3.10-10..Co
6E 6E 65 63 74 69 6F 6E 3A 20 63 6C 6F 73 65 0D nnection: close.
0A 43 6F 6E 74 65 6E 74 2D 54 79 70 65 3A 20 74 .Content-Type: t
65 78 74 2F 68 74 6D 6C 3B 20 63 68 61 72 73 65 ext/html; charse
74 3D 69 73 6F 2D 38 38 35 39 2D 31 0D 0A 0D 0A t=iso-8859-1....
53 65 61 72 63 68 49 74 20 76 31 2E 30 20 2D 20 SearchIt v1.0 -
43 6F 70 79 72 69 67 68 74 20 28 63 29 20 32 30 Copyright (c) 20
30 34 2C 20 49 6C 61 6E 20 53 68 65 6D 65 73 0A 04, Ilan Shemes.
20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
20 20 20 20 20 20 20 20 20 20 20 20 0A 33 30 32 .302
36 31 39 39 0A 52 65 3A 20 5B 70 6F 73 74 5D 20 6199.Re: [post]
4E 61 72 75 74 6F 20 65 70 69 73 6F 64 65 20 31 Naruto episode 1
33 33 20 6D 69 72 61 67 65 2D 74 65 61 6D 0A 61 33 mirage-team.a
6B 68 65 20 3C 74 61 6D 65 72 65 40 68 6F 74 6D khe <tamere@hotm
61 69 6C 2E 63 6F 6D 3E 0A 32 30 30 35 2D 30 35 ail.com>.2005-05
2D 30 38 20 31 37 3A 35 32 3A 30 35 0A 33 30 34 -08 17:52:05.304
34 0A 32 38 0A 31 0A 32 0A 61 6C 74 2E 62 69 6E 4.28.1.2.alt.bin
61 72 69 65 73 2E 63 61 72 74 6F 6F 6E 73 2E 66 aries.cartoons.f
72 65 6E 63 68 2E 61 6E 69 6D 65 73 2D 66 61 6E rench.animes-fan
73 75 62 2E 64 0A 33 30 32 36 32 30 32 0A 52 65 sub.d.3026202.Re
3A 20 5B 70 6F 73 74 5D 20 4E 61 72 75 74 6F 20 : [post] Naruto
65 70 69 73 6F 64 65 20 31 33 33 20 6D 69 72 61 episode 133 mira
67 65 2D 74 65 61 6D 0A 45 6D 62 72 48 61 5A 65 ge-team.EmbrHaZe
20 3C 6D 6F 69 40 6D 61 69 73 6F 6E 2E 63 6F 6D <moi@maison.com
3E 0A 32 30 30 35 2D 30 35 2D 30 38 20 32 32 3A >.2005-05-08 22:
33 34 3A 32 39 0A 31 36 35 38 0A 31 35 0A 31 0A 34:29.1658.15.1.
31 0A 61 6C 74 2E 62 69 6E 61 72 69 65 73 2E 63 1.alt.binaries.c
61 72 74 6F 6F 6E 73 2E 66 72 65 6E 63 68 2E 61 artoons.french.a
6E 69 6D 65 73 2D 66 61 6E 73 75 62 2E 64 0A 38 nimes-fansub.d.8
31 31 30 35 35 0A 4E 61 72 75 74 6F 20 31 33 33 11055.Naruto 133
20 5B 64 61 74 74 65 62 61 79 6F 5D 20 5B 30 31 [dattebayo] [01
2F 32 33 5D 20 2D 20 22 5B 44 42 5D 5F 4E 61 72 /23] - "[DB]_Nar
75 74 6F 5F 31 33 33 5F 5B 42 31 46 33 45 44 38 uto_133_[B1F3ED8
33 5D 2E 70 61 72 32 22 20 79 45 6E 63 0A 62 61 3].par2" yEnc.ba
6B 61 73 68 72 69 6D 70 20 3C 62 61 6B 61 73 68 kashrimp <bakash
72 69 6D 70 40 67 6D 61 69 6C 2E 63 6F 6D 3E 0A rimp@gmail.com>.
32 30 30 35 2D 30 35 2D 30 35 20 30 35 3A 35 34 2005-05-05 05:54
3A 35 37 0A 31 34 39 36 34 0A 31 31 31 0A 31 0A :57.14964.111.1.
31 0A 61 6C 74 2E 62 69 6E 61 72 69 65 73 2E 6D 1.alt.binaries.m
75 6C 74 69 6D 65 64 69 61 2E 61 6E 69 6D 65 0A ultimedia.anime.
38 31 31 30 35 36 0A 4E 61 72 75 74 6F 20 31 33 811056.Naruto 13
33 20 5B 64 61 74 74 65 62 61 79 6F 5D 20 5B 30 3 [dattebayo] [0
33 2F 32 33 5D 20 2D 20 22 5B 44 42 5D 5F 4E 61 3/23] - "[DB]_Na
72 75 74 6F 5F 31 33 33 5F 5B 42 31 46 33 45 44 ruto_133_[B1F3ED
38 33 5D 2E 70 61 72 74 30 32 2E 72 61 72 22 20 83].part02.rar"
79 45 6E 63 0A 62 61 6B 61 73 68 72 69 6D 70 20 yEnc.bakashrimp
3C 62 61 6B 61 73 68 72 69 6D 70 40 67 6D 61 69 <bakashrimp@gmai
6C 2E 63 6F 6D 3E 0A 32 30 30 35 2D 30 35 2D 30 l.com>.2005-05-0
35 20 30 35 3A 35 35 3A 30 33 0A 31 32 34 34 35 5 05:55:03.12445
33 31 31 0A 39 35 34 39 39 0A 34 39 0A 34 39 0A 311.95499.49.49.
61 6C 74 2E 62 69 6E 61 72 69 65 73 2E 6D 75 6C alt.binaries.mul
74 69 6D 65 64 69 61 2E 61 6E 69 6D 65 0A 38 31 timedia.anime.81
31 30 35 37 0A 4E 61 72 75 74 6F 20 31 33 33 20 1057.Naruto 133
5B 64 61 74 74 65 62 61 79 6F 5D 20 5B 30 32 2F [dattebayo] [02/
32 33 5D 20 2D 20 22 5B 44 42 5D 5F 4E 61 72 75 23] - "[DB]_Naru
74 6F 5F 31 33 33 5F 5B 42 31 46 33 45 44 38 33 to_133_[B1F3ED83
5D 2E 70 61 72 74 30 31 2E 72 61 72 22 20 79 45 ].part01.rar" yE
6E 63 0A 62 61 6B 61 73 68 72 69 6D 70 20 3C 62 nc.bakashrimp <b
61 6B 61 73 68 72 69 6D 70 40 67 6D 61 69 6C 2E akashrimp@gmail.
63 6F 6D 3E 0A 32 30 30 35 2D 30 35 2D 30 35 20 com>.2005-05-05
30 35 3A 35 35 3A 30 33 0A 31 32 34 33 38 39 31 05:55:03.1243891
37 0A 39 35 34 36 30 0A 34 39 0A 34 39 0A 61 6C 7.95460.49.49.al
74 2E 62 69 6E 61 72 69 65 73 2E 6D 75 6C 74 69 t.binaries.multi
6D 65 64 69 61 2E 61 6E 69 6D 65 0A 38 31 31 30 media.anime.8110
35 38 0A 4E 61 72 75 74 6F 20 31 33 33 20 5B 64 58.Naruto 133 [d
61 74 74 65 atte

[Paranoid2000]

This could be due to Outpost disabling Gzip encoding in web traffic (the Ad and Active Content filters cannot work with Gzip compressed traffic). See Weird bittorrent problem (http://outpostfirewall.com/forum/showthread.php?t=10184) for details on enabling this (if you do this, you will need to find other solutions for the Ad/Web filtering - Proxomitron (www.proxomitron.info) is a powerful tool here).

[Lagasi]

Thanks, enabling Gzip works!

[Crafton]

Great it works :)
here is the tweak :

Shut down Outpost and open Regedit to amend the Windows Registry.
In HKEY_LOCAL_MACHINE\SOFTWARE\Agnitum\Outpost Firewall there should be an "EnableGzipEncoding" field set to 0 - try setting this to 1 and restarting Outpost.