Isn't CONNECT required for https? I can definitely browse https web pages.
From the cntlm logs I'd say the proxy is webwasher?
Here are the logs from cntlm when trying to connect with openvpn client and below that successful CONNECT to https website.
Default config file opened successfully
cntlm: Proxy listening on 127.0.0.1:3228
cntlm: Resolving proxy *PROXYIP*...
cntlm: Workstation name used: *HOSTNAME*
cntlm: Using following NTLM hashes: NTLMv2(0) NT(2) LM(0)
cntlm: PID 9684: Cntlm ready, staying in the foreground
cntlm: PID 9684: Connection accepted from 127.0.0.1:1841
Thread processing...
******* Round 1 C: 4, S: 5 *******!
Reading headers...
HEAD: POST http://*LOCALMACHINEIP*:2864/ HTTP/1.1
Content-Length => 472
Content-Type => text/xml
Cache-Control => no-cache
Pragma => no-cache
User-Agent => Java/1.6.0_21
Host => 10.167.12.38:2864
Accept => text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Proxy-Connection => keep-alive
NTLM Request:
Domain: *DOMAIN*
Hostname: *HOSTNAME*
Flags: 0xA208B207
Sending auth request...
Content-Type => text/xml
Cache-Control => no-cache
Pragma => no-cache
User-Agent => Java/1.6.0_21
Host => *LOCALMACHINEIP*:2864
Accept => text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Proxy-Connection => Keep-Alive
Connection => Keep-Alive
Proxy-Authorization => NTLM TlRMTVNTUAABAAAAB7IIogUABQAoAAAACAAIACAAAABHQlBDMDk4OUE1MDA3
Reading auth response...
HEAD: HTTP/1.1 407 Proxy Authentication Required
Content-Length => 28
Proxy-Authenticate => NTLM TlRMTVNTUAACAAAAAAAAAAAAAAAHsokCuMxb6VB1mRkAAAAAAAAAAAQAAAA4AAAAAAAAAAAAAAAAAAAA
Proxy-Connection => keep-alive
Got 28 too many bytes.
NTLM Challenge:
Challenge: B8CC5BE950759919 (len: 60)
Flags: 0x289B207
TBofs: 56
TBlen: 0
ttype: 0
NTLM Response:
Hostname: '*HOSTNAME*'
Domain: '*DOMAIN*'
Username: '*USERNAME*'
Response: '4E4146CBBF876D72C7EFF0E05E78702C85C8BF5B07194B3B' (24)
Response: 'C5E6F01880CFB12C00000000000000000000000000000000' (24)
Sending headers...
Content-Length => 472
Content-Type => text/xml
Cache-Control => no-cache
Pragma => no-cache
User-Agent => Java/1.6.0_21
Host => *LOCALMACHINEIP*:2864
Accept => text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Proxy-Connection => Keep-Alive
Connection => Keep-Alive
Proxy-Authorization => NTLM TlRMTVNTUAADAAAAGAAYAGgAAAAYABgAgAAAAAoACgBAAAAADgAOAEoAAAAQABAAWAAAAAAAAACYAAAAB7KJAkEANQAwADAANwB0AG0AcABjAGEAcAAxAEcAQ
gBQAEMAMAA5ADgAOQDF5vAYgM+xLAAAAAAAAAAAAAAAAAAAAABOQUbLv4dtcsfv8OBeeHAshci/WwcZSzs=
Body included. Lenght: 472
data_send: read 472 of 472 / 472 of 472 (errno = ok)
data_send: wrote 472 of 472
Body sent.
******* Round 2 C: 4, S: 5 *******!
Reading headers...
HEAD: HTTP/1.1 200 OK
Content-Length => 121
Content-Type => text/xml
Proxy-Connection => keep-alive
Server => Apache XML-RPC 1.0
Via => 1.1 webwasher (Webwasher 6.8.7.9396)
Sending headers...
Body included. Lenght: 121
data_send: read 121 of 121 / 121 of 121 (errno = ok)
data_send: wrote 121 of 121
Body sent.
******* Round 1 C: 4, S: 5 *******!
Reading headers...
cntlm: PID 9684: Connection accepted from 127.0.0.1:1869
Thread processing...
******* Round 1 C: 6, S: 7 *******!
Reading headers...
HEAD: CONNECT *OPENVPNSERVERIP*:443 HTTP/1.0
Host => *OPENVPNSERVERIP*
NTLM Request:
Domain: *DOMAIN*
Hostname: *HOSTNAME*
Flags: 0xA208B207
Sending auth request...
Host => *OPENVPNSERVERIP*
Proxy-Connection => Keep-Alive
Proxy-Authorization => NTLM TlRMTVNTUAABAAAAB7IIogUABQAoAAAACAAIACAAAABHQlBDMDk4OUE1MDA3
Reading auth response...
HEAD: HTTP/1.1 407 Proxy Authentication Required
Content-Length => 28
Proxy-Authenticate => NTLM TlRMTVNTUAACAAAAAAAAAAAAAAAHsokCRZD8jlFmcosAAAAAAAAAAAQAAAA4AAAAAAAAAAAAAAAAAAAA
Proxy-Connection => keep-alive
Got 28 too many bytes.
NTLM Challenge:
Challenge: 4590FC8E5166728B (len: 60)
Flags: 0x289B207
TBofs: 56
TBlen: 0
ttype: 0
NTLM Response:
Hostname: '*HOSTNAME*'
Domain: '*DOMAIN*'
Username: '*USERNAME*'
Response: '950E332C01D614D856783DACF2DF7AA6699104C61ECAE95A' (24)
Response: 'B77A64557959A81900000000000000000000000000000000' (24)
Sending headers...
Host => *OPENVPNSERVERIP*
Proxy-Connection => Keep-Alive
Proxy-Authorization => NTLM TlRMTVNTUAADAAAAGAAYAGgAAAAYABgAgAAAAAoACgBAAAAADgAOAEoAAAAQABAAWAAAAAAAAACYAAAAB7KJAkEANQAwADAANwB0AG0AcABjAGEAcAAxAEcAQ
gBQAEMAMAA5ADgAOQC3emRVeVmoGQAAAAAAAAAAAAAAAAAAAACVDjMsAdYU2FZ4Pazy33qmaZEExh7K6Vo=
No body.
******* Round 2 C: 6, S: 7 *******!
Reading headers...
HEAD: HTTP/1.1 503 Service Unavailable
Content-Length => 1041
Content-Type => text/html
Date => Thu, 22 Mar 2012 23:40:12 GMT
Expires => Thu, 22 Mar 2012 23:40:12 GMT
Proxy-Connection => close
Server => squid/2.6.STABLE21
X-Squid-Error => ERR_CONNECT_FAIL 113
Sending headers...
Body included. Lenght: 1041
data_send: read 1041 of 1041 / 1041 of 1041 (errno = ok)
data_send: fds 6:7 warning -999 (connection closed)
Could not send whole body
Thread finished.
Joining thread 268707168; rc: 0
Successful connect from FireFox to forums.openvpn.net
******* Round 1 C: 4, S: 5 *******!
Reading headers...
HEAD: CONNECT forums.openvpn.net:443 HTTP/1.1
User-Agent => Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6 ( .NET CLR 3.5.30729; .NET4.0E)
Proxy-Connection => keep-alive
Host => forums.openvpn.net
NTLM Request:
Domain: *DOMAIN*
Hostname: *HOSTNAME*
Flags: 0xA208B207
Sending auth request...
User-Agent => Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6 ( .NET CLR 3.5.30729; .NET4.0E)
Proxy-Connection => Keep-Alive
Host => forums.openvpn.net
Proxy-Authorization => NTLM TlRMTVNTUAABAAAAB7IIogUABQAoAAAACAAIACAAAABHQlBDMDk4OUE1MDA3
Reading auth response...
HEAD: HTTP/1.1 407 Proxy Authentication Required
Content-Length => 28
Proxy-Authenticate => NTLM TlRMTVNTUAACAAAAAAAAAAAAAAAHsokC2PILSRHUB3gAAAAAAAAAAAQAAAA4AAAAAAAAAAAAAAAAAAAA
Proxy-Connection => keep-alive
Got 28 too many bytes.
NTLM Challenge:
Challenge: D8F20B4911D40778 (len: 60)
Flags: 0x289B207
TBofs: 56
TBlen: 0
ttype: 0
NTLM Response:
Hostname: '*HOSTNAME*'
Domain: '*DOMAIN*'
Username: '*USERNAME*'
Response: '031A28AF0F310C11F06A8FE9EF4DB320988BBE65409975F1' (24)
Response: 'B992DD196CEE256400000000000000000000000000000000' (24)
Sending headers...
User-Agent => Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6 ( .NET CLR 3.5.30729; .NET4.0E)
Proxy-Connection => Keep-Alive
Host => forums.openvpn.net
Proxy-Authorization => NTLM TlRMTVNTUAADAAAAGAAYAGgAAAAYABgAgAAAAAoACgBAAAAADgAOAEoAAAAQABAAWAAAAAAAAACYAAAAB7KJAkEANQAwADAANwB0AG0AcABjAGEAcAAxAEcAQ
gBQAEMAMAA5ADgAOQC5kt0ZbO4lZAAAAAAAAAAAAAAAAAAAAAADGiivDzEMEfBqj+nvTbMgmIu+ZUCZdfE=
No body.
******* Round 2 C: 4, S: 5 *******!
Reading headers...
HEAD: HTTP/1.0 200 Connection established
*************************
CL: (null), C: (null), CT: (null), TE: (null)
Sending headers...
Ok CONNECT response. Tunneling...
tunnel: select cli: 4, srv: 5
cntlm: PID 9684: Connection accepted from 127.0.0.1:4074
Thread processing...
******* Round 1 C: 6, S: 7 *******!
Reading headers...
HEAD: CONNECT forums.openvpn.net:443 HTTP/1.1
User-Agent => Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6 ( .NET CLR 3.5.30729; .NET4.0E)
Proxy-Connection => keep-alive
Host => forums.openvpn.net
NTLM Request:
Domain: *DOMAIN*
Hostname: *HOSTNAME*
Flags: 0xA208B207
Sending auth request...
User-Agent => Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6 ( .NET CLR 3.5.30729; .NET4.0E)
Proxy-Connection => Keep-Alive
Host => forums.openvpn.net
Proxy-Authorization => NTLM TlRMTVNTUAABAAAAB7IIogUABQAoAAAACAAIACAAAABHQlBDMDk4OUE1MDA3
Reading auth response...
HEAD: HTTP/1.1 407 Proxy Authentication Required
Content-Length => 28
Proxy-Authenticate => NTLM TlRMTVNTUAACAAAAAAAAAAAAAAAHsokCighrcUlbrT0AAAAAAAAAAAQAAAA4AAAAAAAAAAAAAAAAAAAA
Proxy-Connection => keep-alive
Got 28 too many bytes.
NTLM Challenge:
Challenge: 8A086B71495BAD3D (len: 60)
Flags: 0x289B207
TBofs: 56
TBlen: 0
ttype: 0
NTLM Response:
Hostname: '*HOSTNAME*'
Domain: '*DOMAIN*'
Username: '*USERNAME*'
Response: 'AA728EB9710A7C556D7348CD75437A56E22F351230C637EE' (24)
Response: '9D21A728F059CA5700000000000000000000000000000000' (24)
Sending headers...
User-Agent => Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6 ( .NET CLR 3.5.30729; .NET4.0E)
Proxy-Connection => Keep-Alive
Host => forums.openvpn.net
Proxy-Authorization => NTLM TlRMTVNTUAADAAAAGAAYAGgAAAAYABgAgAAAAAoACgBAAAAADgAOAEoAAAAQABAAWAAAAAAAAACYAAAAB7KJAkEANQAwADAANwB0AG0AcABjAGEAcAAxAEcAQ
gBQAEMAMAA5ADgAOQCdIaco8FnKVwAAAAAAAAAAAAAAAAAAAACqco65cQp8VW1zSM11Q3pW4i81EjDGN+4=
No body.
******* Round 2 C: 6, S: 7 *******!
Reading headers...
HEAD: HTTP/1.0 200 Connection established
*************************
CL: (null), C: (null), CT: (null), TE: (null)
Sending headers...
Ok CONNECT response. Tunneling...
tunnel: select cli: 6, srv: 7
cntlm: PID 9684: Connection accepted from 127.0.0.1:4077
Thread processing...
******* Round 1 C: 8, S: 9 *******!
Reading headers...
HEAD: CONNECT forums.openvpn.net:443 HTTP/1.1
cntlm: PID 9684: Connection accepted from 127.0.0.1:4080
Thread processing...
User-Agent => Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6 ( .NET CLR 3.5.30729; .NET4.0E)
cntlm: PID 9684: Connection accepted from 127.0.0.1:4081Proxy-Connection => keep-alive
Host => forums.openvpn.net
NTLM Request:
Thread processing...
******* Round 1 C: 10, S: 11 *******!
Reading headers...
Domain: *DOMAIN*
cntlm: PID 9684: Connection accepted from 127.0.0.1:4082
Hostname: *HOSTNAME*
Flags: 0xA208B207
******* Round 1 C: 12, S: 13 *******!
Thread processing..Thread processing...
Sending auth request...
cntlm: PID 9684: Connection accepted from 127.0.0.1:4085
HEAD: CONNECT forums.openvpn.net:443 HTTP/1.1
User-Agent => Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6 ( .NET CLR 3.5.30729; .NET4.0E)
Proxy-Connection => Keep-Alive
Host => forums.openvpn.net
******* Round 1 C: 14, S: 16 *******!
Reading headers...
Proxy-Authorization => NTLM TlRMTVNTUAABAAAAB7IIogUABQAoAAAACAAIACAAAABHQlBDMDk4OUE1MDA3
Reading auth response...
HEAD: CONNECT forums.openvpn.net:443 HTTP/1.1
HEAD: CONNECT forums.openvpn.net:443 HTTP/1.1
HEAD: HTTP/1.1 407 Proxy Authentication Required
Thread processing...
User-Agent => Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6 ( .NET CLR 3.5.30729; .NET4.0E)
Proxy-Connection => keep-alive
Host => forums.openvpn.net
NTLM Request:
Domain: *DOMAIN*
******* Round 1 C: 15, S: 17 *******!
Reading headers...
Hostname: *HOSTNAME*
User-Agent => Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6 ( .NET CLR 3.5.30729; .NET4.0E)
Flags: 0xA208B207
roxy-Connection => keep-alive
Sending auth request...
Host => forums.openvpn.net
NTLM Request:
User-Agent => Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6 ( .NET CLR 3.5.30729; .NET4.0E)
Domain: *DOMAIN*
Proxy-Connection => Keep-Alive
Content-Length => 28
Hostname: *HOSTNAME*
Host => forums.openvpn.net
Proxy-Authenticate => NTLM TlRMTVNTUAACAAAAAAAAAAAAAAAHsokC3tJuN8Z6ZLkAAAAAAAAAAAQAAAA4AAAAAAAAAAAAAAAAAAAA
User-Agent => Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6 ( .NET CLR 3.5.30729; .NET4.0E)
Flags: 0xA208B207
EAD: CONNECT forums.openvpn.net:443 HTTP/1.1
Proxy-Authorization => NTLM TlRMTVNTUAABAAAAB7IIogUABQAoAAAACAAIACAAAABHQlBDMDk4OUE1MDA3
Proxy-Connection => keep-alive
Proxy-Connection => keep-alive
Reading auth response...
ot 28 too many bytes.
Reading auth response...
Host => forums.openvpn.net
NTLM Request:
:
NTLM Request:
User-Agent => Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6 ( .NET CLR 3.5.30729; .NET4.0E)
Challenge: DED26E37C67A64B9 (len: 60)
Domain: *DOMAIN*
Proxy-Connection => Keep-Alive
Flags: 0x289B207
Hostname: *HOSTNAME*
Host => forums.openvpn.net
TBofs: 56
TBlen: 0
ttype: 0
TLM Response:
208B207
TLM Response:
Proxy-Authorization => NTLM TlRMTVNTUAABAAAAB7IIogUABQAoAAAACAAIACAAAABHQlBDMDk4OUE1MDA3
HEAD: HTTP/1.1 407 Proxy Authentication Required
Reading auth response...
Sending auth request...Sending auth request...
Domain: '*DOMAIN*'
User-Agent => Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6 ( .NET CLR 3.5.30729; .NET4.0E)
Username: '*USERNAME*'
Proxy-Connection => Keep-Alive
Response: '9A759A4BC928422D6D4CB460C7D0E90D60DF302720CF2963' (24)
Host => forums.openvpn.net
Response: '7F8E6B3780D7127700000000000000000000000000000000' (24)
User-Agent => Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6 ( .NET CLR 3.5.30729; .NET4.0E)
Sending headers...
Proxy-Authorization => NTLM TlRMTVNTUAABAAAAB7IIogUABQAoAAAACAAIACAAAABHQlBDMDk4OUE1MDA3
HEAD: HTTP/1.1 407 Proxy Authentication Required
Proxy-Connection => keep-alive
Reading auth response...
User-Agent => Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6 ( .NET CLR 3.5.30729; .NET4.0E)
Host => forums.openvpn.net
NTLM Request:
on => Keep-Alive
NTLM Request:
Host => forums.openvpn.net
Domain: *DOMAIN*
Proxy-Authorization => NTLM TlRMTVNTUAADAAAAGAAYAGgAAAAYABgAgAAAAAoACgBAAAAADgAOAEoAAAAQABAAWAAAAAAAAACYAAAAB7KJAkEANQAwADAANwB0AG0AcABjAGEAcAAxAEcAQ
gBQAEMAMAA5ADgAOQB/jms3gNcSdwAAAAAAAAAAAAAAAAAAAACadZpLyShCLW1MtGDH0OkNYN8wJyDPKWM=
Hostname: *HOSTNAME*
o body.
s: 0xA208B207
o body.
Sending auth request...
HEAD: HTTP/1.1 407 Proxy Authentication Required
******* Round 2 C: 8, S: 9 *******!
Reading headers...
User-Agent => Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6 ( .NET CLR 3.5.30729; .NET4.0E)
Proxy-Connection => Keep-Alive
Host => forums.openvpn.net
Content-Length => 28
Proxy-Authorization => NTLM TlRMTVNTUAABAAAAB7IIogUABQAoAAAACAAIACAAAABHQlBDMDk4OUE1MDA3
Proxy-Authenticate => NTLM TlRMTVNTUAACAAAAAAAAAAAAAAAHsokCk4U9FWiNnzcAAAAAAAAAAAQAAAA4AAAAAAAAAAAAAAAAAAAA
Proxy-Connection => keep-alive
Reading auth response...
Got 28 too many bytes.
NTLM Challenge:
Challenge: 93853D15688D9F37 (len: 60)
Flags: 0x289B207
TBofs: 56
TBlen: 0
ttype: 0
NTLM Response:
Hostname: '*HOSTNAME*'
Domain: '*DOMAIN*'
Username: '*USERNAME*'
Response: '4A5A26E56F5D8B8B8034260F40C7FF04E3706AEB89CC33F2' (24)
Response: 'C69DB002453E702200000000000000000000000000000000' (24)
Sending headers...
Proxy Authentication Required
Sending headers...
Content-Length => 28
User-Agent => Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6 ( .NET CLR 3.5.30729; .NET4.0E)
Proxy-Authenticate => NTLM TlRMTVNTUAACAAAAAAAAAAAAAAAHsokC0Wei1HaDKdwAAAAAAAAAAAQAAAA4AAAAAAAAAAAAAAAAAAAA
Proxy-Connection => Keep-Alive
Proxy-Connection => keep-alive
Host => forums.openvpn.net
Got 28 too many bytes.
NTLM Challenge:
ion => NTLM TlRMTVNTUAADAAAAGAAYAGgAAAAYABgAgAAAAAoACgBAAAAADgAOAEoAAAAQABAAWAAAAAAAAACYAAAAB7KJAkEANQAwADAANwB0AG0AcABjAGEAcAAxAEcAQgBQAEMAMAA5ADgAO
QDGnbACRT5wIgAAAAAAAAAAAAAAAAAAAABKWiblb12Li4A0Jg9Ax/8E43Bq64nMM/I=
NTLM Challenge:
Challenge: D167A2D4768329DC (len: 60)
o body.
s: 0x289B207
No body.
TBofs: 56
TBlen: 0
ttype: 0
NNTLM Response:
******* Round 2 C: 10, S: 11 *******!
Reading headers...
Content-Length => 28
Hostname: '*HOSTNAME*'
Proxy-Authenticate => NTLM TlRMTVNTUAACAAAAAAAAAAAAAAAHsokCOUckC0LdYI8AAAAAAAAAAAQAAAA4AAAAAAAAAAAAAAAAAAAA
Domain: '*DOMAIN*'
Proxy-Connection => keep-alive
Username: '*USERNAME*'
Got 28 too many bytes.
TLM Challenge:
BB07B43197F2924D62ADC16A1E5EF760B1E2415A8A04D' (24)
NTLM Challenge:
Response: '5366E72974358E6800000000000000000000000000000000' (24)
ending headers...
B42DD608F (len: 60)
Sending headers...
Flags: 0x289B207
User-Agent => Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6 ( .NET CLR 3.5.30729; .NET4.0E)
TBofs: 56
TBlen: 0
ttype: 0
NTLM Response:
n => Keep-Alive
NTLM Response:
Content-Length => 28
Host => forums.openvpn.net
Hostname: '*HOSTNAME*'
Proxy-Authenticate => NTLM TlRMTVNTUAACAAAAAAAAAAAAAAAHsokCOlIp0279z+gAAAAAAAAAAAQAAAA4AAAAAAAAAAAAAAAAAAAA
Proxy-Authorization => NTLM TlRMTVNTUAADAAAAGAAYAGgAAAAYABgAgAAAAAoACgBAAAAADgAOAEoAAAAQABAAWAAAAAAAAACYAAAAB7KJAkEANQAwADAANwB0AG0AcABjAGEAcAAxAEcAQ
gBQAEMAMAA5ADgAOQBTZucpdDWOaAAAAAAAAAAAAAAAAAAAAABle7B7Qxl/KSTWKtwWoeXvdgseJBWooE0=
Domain: '*DOMAIN*'
Proxy-Connection => keep-alive
Username: '*USERNAME*'
No body.
Got 28 too many bytes.
TLM Challenge:
40AE83856052E42728DBC756242887EFCB691BF5CABBB' (24)
NTLM Challenge:
******* Round 2 C: 12, S: 13 *******!
Reading headers...
Response: 'E7825C424B9FA75100000000000000000000000000000000' (24)
ending headers...
36EFDCFE8 (len: 60)
Sending headers...
Flags: 0x289B207
User-Agent => Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6 ( .NET CLR 3.5.30729; .NET4.0E)
TBofs: 56
TBlen: 0
ttype: 0
NTLM Response:
n => Keep-Alive
NTLM Response:
Host => forums.openvpn.net
Hostname: '*HOSTNAME*'
Proxy-Authorization => NTLM TlRMTVNTUAADAAAAGAAYAGgAAAAYABgAgAAAAAoACgBAAAAADgAOAEoAAAAQABAAWAAAAAAAAACYAAAAB7KJAkEANQAwADAANwB0AG0AcABjAGEAcAAxAEcAQ
gBQAEMAMAA5ADgAOQDnglxCS5+nUQAAAAAAAAAAAAAAAAAAAAAmJAroOFYFLkJyjbx1YkKIfvy2kb9cq7s=
Domain: '*DOMAIN*'
Username: '*USERNAME*'
Response: 'FD3DB5579EDB2CBCB2677C8372949D94F33BDEBBF0F1D983' (24)
No body.
Response: 'CC963326795C836F00000000000000000000000000000000' (24)
Sending headers...
******* Round 2 C: 14, S: 16 *******!
Reading headers...
User-Agent => Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6 ( .NET CLR 3.5.30729; .NET4.0E)
Proxy-Connection => Keep-Alive
Host => forums.openvpn.net
Proxy-Authorization => NTLM TlRMTVNTUAADAAAAGAAYAGgAAAAYABgAgAAAAAoACgBAAAAADgAOAEoAAAAQABAAWAAAAAAAAACYAAAAB7KJAkEANQAwADAANwB0AG0AcABjAGEAcAAxAEcAQ
gBQAEMAMAA5ADgAOQDMljMmeVyDbwAAAAAAAAAAAAAAAAAAAAD9PbVXntssvLJnfINylJ2U8zveu/Dx2YM=
No body.
******* Round 2 C: 15, S: 17 *******!
Reading headers...
HEAD: HTTP/1.0 200 Connection established
*************************
CL: (null), C: (null), CT: (null), TE: (null)
Sending headers...
Ok CONNECT response. Tunneling...
tunnel: select cli: 8, srv: 9
HEAD: HTTP/1.0 200 Connection established
*************************
CL: (null), C: (null), CT: (null), TE: (null)
Sending headers...
Ok CONNECT response. Tunneling...
tunnel: select cli: 10, srv: 11
HEAD: HTTP/1.0 200 Connection established
*************************
CL: (null), C: (null), CT: (null), TE: (null)
Sending headers...
Ok CONNECT response. Tunneling...
tunnel: select cli: 12, srv: 13
HEAD: HTTP/1.0 200 Connection established
*************************
CL: (null), C: (null), CT: (null), TE: (null)
Sending headers...
Ok CONNECT response. Tunneling...
tunnel: select cli: 14, srv: 16
HEAD: HTTP/1.0 200 Connection established
*************************
CL: (null), C: (null), CT: (null), TE: (null)
Sending headers...
Ok CONNECT response. Tunneling...
tunnel: select cli: 15, srv: 17