Subversion is an essential tool for programmers. It is a real pain if subversion is suddenly blocked because of a reconfiguration of a company firewall. This has actually happened to me two times at two different jobs now.
Subversion traffic is over http (port 80), but, as far as I understand, it is special in the sense that it makes use of the PROPFIND http request type, which is not part of ordinary web traffic.
To prove that indeed PROPFIND was being blocked by our firewall, I did the following:
svn command from inside the company works fine. For example:
svn log http://svn.bigcat.unimaas.nl/pathvisio- The same svn commands from outside the company hangs indefinitely. I confirmed this on three different outside locations. (A collegue reported a timeout message that mentions PROPFIND)
- Browsing to this page: http://svn.bigcat.unimaas.nl/pathvisio/ works fine from inside and outside.
To show that it's not somehow a subversion problem, you can get the same effect with curl. The following command works from inside, but hangs indefinitely from outside:
curl http://svn.bigcat.unimaas.nl/pathvisio/ -H "Depth: 0" --request PROPFINDAn ordinary GET request works both inside and outside:
curl http://svn.bigcat.unimaas.nl/pathvisio/
In both jobs, when I raised the issue with ICTS, their response was something like: "port 80 is open, we can't reproduce", and they just ignore my talk on http request types.
My questions are:
- To be absolutely sure, is my method sufficient to prove that the problem is in blocking PROPFIND?
- Do firewalls commonly block PROPFIND?
- Can you give me suggestions how to explain this problem in the right language / terminology so that ICTS responds to it? I never administered a company firewall, I have no idea how that goes.
