Blocked rclone solution?

lawmanuk · July 6, 2020, 12:15pm

Hi,

My windows work LAN blocks rclone (and many other apps) talking to the world.

The same is true for trying to access most backends (eg. yandex/mega/pcloud/google etc.) via the browser I installed (without admin rights).

However, I note that Tardigrade.io is reachable via my browser which I installed without admin rights. I thought this would save me. Rclone website is also reachable.

Also, tardigrade storage network IP addresses should be unblockable as its a million different computers linked together.

Is there a way to route rclone via http or another method, which I'm theorising should be able to reach all target IP addresses which the browser can reach?

Can anyone suggest a workaround that doesn't require admin rights?

Many thanks in advance.

sweh · July 6, 2020, 12:19pm

Are you asking if rclone can be used with a proxy? If so, yes; check out the FAQ ( https://rclone.org/faq/ ) which has a pretty detailed explanation. You may need to work out what your proxy settings are (which can be complicated in a large enterprise!).

If you're asking if rclone uses the http/https protocols, then it depends on the service. rclone talks to the remote API. For most cloud offerings this is https based, so rclone talks that way automatically.

lawmanuk · July 6, 2020, 12:24pm

I'm trying to access tardigrade backend.

Do you know if this uses http(s) protocol?

If not, how I can do this without admin rights?

Do you know of a http(s) proxy server I can setup without admin rights? I won't be able to set env variables, as command line is blocked too.

My LAN is tightly controlled. I can't even run nordvpn chrome extension via my browser as it won't reach destination server.

Trying to get a workaround sorted without admin rights.

Many thanks

asdffdsa · July 6, 2020, 1:43pm

download rclone
create a remote
test

lawmanuk · July 6, 2020, 1:45pm

I don't understand what you want me to test?

I've downloaded rclone and ran it.

Only local backend working. Other backends are blocked.

asdffdsa · July 6, 2020, 1:47pm

so you created a remote for Tardigrade.io?
if so, you run a command like this, what is the output?
rclone lsd remote: -vv

lawmanuk · July 6, 2020, 3:33pm

yes. I setup remote for tardigrade.io in another computer where comms are not blocked.

I transferred config.conf to work laptop.

rclone can see the backend when i type "rclone config"

If I run "rclone lsd remote: -vv" (btw, I don't have access to command line, so have to run this command directly in file manager which shows rclone run in terminal window).

it just hangs when trying to connect as below:

> 2020/07/06 16:26:20 DEBUG : FS sj://: connecting...

The ports are probably blocked and using some kind of company proxy for any other requests.

I know http port is open as my own preferred browser works which I installed without admin rights (although plenty of websites are still blocked except tardigrade.io).

I can't set environment variables for http proxy like rclone guide suggests.

Wondering if :-

Tardigrade can work via http ports?
There is a solution to route rclone via http ports without environment variables and/or admin rights.
(I'm focusing on tardigrade, as all other backends are blocked on http aswell).

Thanks

ncw · July 6, 2020, 4:02pm

Tardigrade seems to open a lot of different ports and connections mostly on 28967 and 28968 so I'd say no...

You can use a SOCKS proxy but I think that needs an env var to configure.

asdffdsa · July 6, 2020, 4:23pm

can you run task scheduler - taskschd.msc
type win+r and if the open dialog box opens, type taskschd.msc, click ok

lawmanuk · July 7, 2020, 8:12am

Hi,

Win+R is restricted.
I can still run 'taskschd.msc' from total commander file manager.

However, when I run this it give error "MMC cannot create the snap-in because of current user policies" The app window has no other entries.

asdffdsa · July 7, 2020, 2:29pm

can you get to task manager, one the file menu, there is run new task

can you run this from from the file manager terminal
cmd /c set http_proxy=127.0.0.1:8888 & set http_proxy & c:\data\rclone\scripts\rclone.exe & pause

you might try this, which is a cmd replacement, does not use cmd.exe
https://jpsoft.com/products/tcc-le.html

lawmanuk · July 8, 2020, 10:12am

Downloaded that program but when running it, it gave an error and didn't install.

Entering

cmd /c set http_proxy=127.0.0.1:8888 & set http_proxy & c:\temp\rclone\scripts\rclone.exe & pause

results in cmd window showing below:

http_proxy=127.0.0.1:8888
Usage:
  rclone [flags]
  rclone [command]

Available Commands:
  about           Get quota information from the remote.
  authorize       Remote authorization.
  backend         Run a backend specific command.
  cat             Concatenates any files and sends them to stdout.
  check           Checks the files in the source and destination match.
  cleanup         Clean up the remote if possible
  config          Enter an interactive configuration session.
  copy            Copy files from source to dest, skipping already copied
  copyto          Copy files from source to dest, skipping already copied
  copyurl         Copy url content to dest.
  cryptcheck      Cryptcheck checks the integrity of a crypted remote.
  cryptdecode     Cryptdecode returns unencrypted file names.
  dedupe          Interactively find duplicate files and delete/rename them.
  delete          Remove the contents of path.
  deletefile      Remove a single file from remote.
  genautocomplete Output completion script for a given shell.
  gendocs         Output markdown docs for rclone to the directory supplied.
  hashsum         Produces a hashsum file for all the objects in the path.
  help            Show help for rclone commands, flags and backends.
  link            Generate public link to file/folder.
  listremotes     List all the remotes in the config file.
  ls              List the objects in the path with size and path.
  lsd             List all directories/containers/buckets in the path.
  lsf             List directories and objects in remote:path formatted for pars
ing
  lsjson          List directories and objects in the path in JSON format.
  lsl             List the objects in path with modification time, size and path
.
  md5sum          Produces an md5sum file for all the objects in the path.
  mkdir           Make the path if it doesn't already exist.
  mount           Mount the remote as file system on a mountpoint.
  move            Move files from source to dest.
  moveto          Move file or directory from source to dest.
  ncdu            Explore a remote with a text based user interface.
  obscure         Obscure password for use in the rclone config file
  purge           Remove the path and all of its contents.
  rc              Run a command against a running rclone.
  rcat            Copies standard input to file on remote.
  rcd             Run rclone listening to remote control commands only.
  rmdir           Remove the path if empty.
  rmdirs          Remove empty directories under the path.
  serve           Serve a remote over a protocol.
  settier         Changes storage class/tier of objects in remote.
  sha1sum         Produces an sha1sum file for all the objects in the path.
  size            Prints the total size and number of objects in remote:path.
  sync            Make source and dest identical, modifying destination only.
  touch           Create new file or change file modification time.
  tree            List the contents of the remote in a tree like fashion.
  version         Show the version number.

Use "rclone [command] --help" for more information about a command.
Use "rclone help flags" for to see the global flags.
Use "rclone help backends" for a list of supported services.
Press any key to continue . . .

I tried checking if env variables were changed with below.

entering below:

cmd /c set & pause

resulted in below output. Can't see any variable for http_proxy.

ALLUSERSPROFILE=C:\ProgramData
APPDATA=C:\Users\XXXXX\AppData\Roaming
COMMANDER_DRIVE=C:
COMMANDER_EXE=C:\Users\XXXXX\Downloads\totalcmd\TOTALCMD64.EXE
COMMANDER_INI=C:\Users\XXXXX\Downloads\totalcmd\wincmd.ini
COMMANDER_INSTANCE=1
COMMANDER_PATH=C:\Users\XXXXX\Downloads\totalcmd
CommonProgramFiles=C:\Program Files\Common Files
CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files
CommonProgramW6432=C:\Program Files\Common Files
COMPUTERNAME=XXXXX
ComSpec=C:\windows\system32\cmd.exe
DEFLOGDIR=C:\ProgramData\McAfee\DesktopProtection
FP_NO_HOST_CHECK=NO
HOMEDRIVE=H:
HOMEPATH=\
HOMESHARE=\\azfs\DGThome\XXXXX
LOCALAPPDATA=C:\Users\XXXXX\AppData\Local
LOGONSERVER=\\XXXXX-CSAD-01
MCPC8_CLIENT_PATH=C:\Program Files (x86)\Level 3\VCT for Desktop/Communicator.ex
e
NEXTHINK=C:\Program Files\Nexthink\Collector
NUMBER_OF_PROCESSORS=4
OS=Windows_NT
OUTLOOK_ADDIN=C:\Program Files (x86)\Level 3\Outlook Add-in for VCT for Desktop\
OutlookAddin
Path=C:\windows\system32;C:\windows;C:\windows\System32\Wbem;C:\windows\System32
\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Level 3\Outlook Add-in for VCT f
or Desktop\OutlookAddin;C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader;c:
\Program files (x86)\Adobe\Adobe 2015\Acrobat\Acrobat
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
PROCESSOR_ARCHITECTURE=AMD64
PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 78 Stepping 3, GenuineIntel
PROCESSOR_LEVEL=6
PROCESSOR_REVISION=4e03
ProgramData=C:\ProgramData
ProgramFiles=C:\Program Files
ProgramFiles(x86)=C:\Program Files (x86)
ProgramW6432=C:\Program Files
PROMPT=$P$G
PSModulePath=C:\windows\system32\WindowsPowerShell\v1.0\Modules\
PUBLIC=C:\Users\Public
SESSIONNAME=Console
siteclust=WSSBDCCL00
SystemDrive=C:
SystemRoot=C:\windows
TEMP=C:\Users\XXXXX~1.CAA\AppData\Local\Temp
TMP=C:\Users\XXXXX~1.CAA\AppData\Local\Temp
UATDATA=C:\windows\CCM\UATData\D9F8C395-CAB8-491d-B8AC-179A1FE1BE77
USERDNSDOMAIN=XXXXX
USERDOMAIN=XXXXX
USERDOMAIN_ROAMINGPROFILE=XXXXX
USERNAME=XXXXX
USERPROFILE=C:\Users\XXXXX
VSEDEFLOGDIR=C:\ProgramData\McAfee\DesktopProtection
windir=C:\windows
Press any key to continue . . .

lawmanuk · July 8, 2020, 10:16am

is there a portable version of the cmd replacement so no installation needed?

thx

asdffdsa · July 8, 2020, 12:51pm

so it seems to be working, just change the rclone command.

that is expected behavior.
set is only valid for the current process.
if you want a variable to be global, service reboots and appear for all process, then you must use setx

what error?

lawmanuk · July 8, 2020, 1:02pm

tried the following but it still couldn't reach tardigarde.

cmd /c set http_proxy=127.0.0.1:8888 & set http_proxy & c:\temp\rclone\scripts\rclone.exe lsd strj-xxxx: -vv & pause

http_proxy=127.0.0.1:8888
2020/07/08 13:56:23 DEBUG : rclone: Version "v1.52.2" starting with parameters [
"c:\\temp\\rclone\\scripts\\rclone.exe" "lsd" "strj-xxxx:" "-vv"]
Enter configuration password:
password:
2020/07/08 13:56:27 DEBUG : Using config file from "c:\\temp\\rclone\\scripts\\r
clone.conf"
2020/07/08 13:56:27 DEBUG : FS sj://: connecting...
2020/07/08 13:56:48 DEBUG : FS sj://: connected: <nil>
2020/07/08 13:56:48 Failed to create file system for "strj-xxxx:": tardigrad
e: project: uplink: metainfo error: rpccompat: dial tcp 146.148.29.23:7777: conn
ectex: A connection attempt failed because the connected party did not properly
respond after a period of time, or established connection failed because connect
ed host has failed to respond.
Press any key to continue . . .

The alternate cmd tries to install. As I have no admin rights it stops mid installation and says "are you sure you want to cancel installation". Responding with 'no' doesn't help.

The only way I can run programs is:

Install without admin rights . eg. Brave browser
Run portable app. This is preferred.
Even some portable apps are blocked by smartscreen policy.

Thats why I was looking for portable version of cmd alternative. I've tried several others like 'cmder' but they all say command line is restricted by admin.

However, I probably don't need command line, as can run rclone from file manager total commander, but the problem seems to be it can't reach tardigrade through the firewall.

asdffdsa · July 8, 2020, 1:27pm

you need to set the variable to a real proxy server, i just used a dummy value to demonstrate.

lawmanuk · July 8, 2020, 1:37pm

oh ok.

do you know any that can work from portable installation without admin rights?

thanks

asdffdsa · July 8, 2020, 1:49pm

install the app on a computer with admin rights
copy the files to the locked down computer

another option is to add a new user with admin rights.
i do this all the time.

there are many boot discs that can create an admin account.

create admin account
boot into that admin account
install software as admin
delete the admin account

lawmanuk · July 8, 2020, 1:51pm

will do thanks.

any preferred portable http proxy that would work with rclone.

Thanks

asdffdsa · July 8, 2020, 2:01pm

when you posted, you should have been asked for your operating system?