TheRealTimeWeb.com - Windows

IIS 7: Allow One IP Address, Block All Others

Thu, 18 Oct 2012 06:05:00 +0100

Today I found myself having to configure IIS under Windows Server 2008 and I needed to restrict access to a specific directory by IP address. It was quite tricky to figure out how to do this due to Microsoft's idiotic way of presenting what could easily be a straight forward user interface operation...

What follows are the steps involved to block all IPs in IIS, and granting access to one specific IP. As fa as I can tell this will work both on a site and a directory level (in my case it was a virtual directory that needed restricting).

Step 1: Click the 'Add Allow entry' option

Step 2: Add the IP address you wish to allow access

Step 3: Select the IP entry in the list (there's only one in this case) and then click the 'Edit Feature Settings' option

Step 4: Select 'Deny' in the dropdown menu - this blocks all IPs that are not listed

Hope this helps someone.

'The format of the specified network name is invalid' - IIS Error 0x800704BE

Mon, 24 Oct 2011 21:45:00 +0100

Oh don't you just love cryptic error messages that could mean one hundred and one things? Yeah, me too.

So in the interest of some poor soul (maybe it's you ;-) searching on this topic in the year 2142 I decided to point out what resolved this issue for me.

Background: I am running Windows Server 2008 R2 with IIS inside a Hyper-V instance. The VM was configured with a static IP and each IIS site was configured to bind to that IP, and that IP alone.
I transferred the VM to Amazon EC2 (using the ec2-import-instance API) since I wanted to move away from having to maintain my own physical hardware. Long story short, once transferred I was unable to start any of the IIS sites, they all failed with the error 'The format of the specified network name is invalid - Error 0x800704BE'.

I knew that this error was likely related to IP bindings of some kind (EC2 usually expects you to use DHCP for IP address assignment since even an elastic IP can change) so I tried binding a few IIS sites to 'all' IPs. Still the sites would not start, but throw the above error.

I dug deeper and used the netsh utility (Windows commandline) to show which the network configuration for the machine, and in particular which IPs the HTTP service listens to:

netsh http show iplisten

This listed just one (the previous static) IP of my VM - this was now wrong. So I removed the binding with

netsh http delete iplisten ipaddress=11.22.33.44 (where 11.22.33.44 is the actual IP that needs removing)

Next set the service up to listen to all IPs:

netsh http add iplisten ipaddress=0.0.0.0

I then restarted IIS using

iisreset

and bingo, the sites started to work.

Hope this helps someone.

Microsoft Releases HTML5 Video Player Framework

Thu, 08 Sep 2011 12:49:00 +0100

The following tweet by Mike Downey caught my eye this morning. He announced that Microsoft have released Player Framework, which in their words is 'an open source video player framework for HTML5, Silverlight, Windows Phone and other application platforms'. Upon closer inspection it is the former Silverlight Media Framework, shifted towards HTML5.

It's interesting to note that this Player does not use Flash as a fallback technology, but enables developers instead to use Silverlight, or indeed choose from a variety of combinations such as HTML5 only (video tag), Silverlight only, fallback to HTML5 or fallback to Silverlight.
Whilst the player itself looks as one would expect, offering features such as mute, poster frame and full screen mode it also claims to add support for plugin models, advertising standards support, W3C timed text (TTML) for captions amongst other things.

What the demo also shows is the effort involved in providing a consistent cross platform experience when using the video tag. I'm not sure why, but when I tried the demo in FireFox on my Mac the 'Fallback to Silverlight' went straight to Silverlight and did not play the HTML5 content, but the HTML-only tab worked fine. Moreover since Silverlight does not seem to be compatible with the 64bit mode of my browser I saw no content at all, just a prompt to install Silverlight (which I am sure I already had installed - but maybe only a 32bit version?). I guess we can blame this on the beta status of the framework. But why not fall back to Flash anywhere? Is it really just because Flash-hating is a sport these days, or do companies simply not care about providing a good user experience? Is it too much to ask to detect the fact that I cannot run Silverlight and serve up a SWF instead?

Fullscreen mode is another sore point it seems. Whilst the framework claims to support fullscreen mode it really is just a full-browser mode - that's not full screen in my book. I also noticed some audio problems which surfaced in a delay when mute and unmute was selected.

All in all I congratulate Microsoft for putting in some effort and I am sure adding Flash fallback (let's be serious here: it makes a lot more sense than Silverlight fallback) would not be too difficult.
The plugin architecture of the framework also looks very useful, and some of the core features of the player are implemented in that way, with JavaScript providing the glue to it all.

You can check out the player demos here.

Configuring RTMFP Unicast on EC2

Wed, 20 Jul 2011 12:21:00 +0100

A few weeks ago I was testing some of the FMS4 features on a Windows EC2 instance. My goal was to use RTMFP (usually used for peer to peer communications in Flash) in a client-server mode, basically replacing RTMP in order to achieve lower latency.
In case you do not want to read the entire post below, here's were I went wrong:
1) I did not open port 1935 over UDP, only TCP. As it turned out, RTMFP does require port 1935 over UDP for the initial contact. 2) I didn't configure the HostPort directive in Adaptor.xml correctly. Instead of adding the public attribute I had added the IP just to the node valu.
Instead of
:19350-65535
I had configured
50.19.224.164:19350-65535
After correcting that I was able to connect via RTMFP. This also works when the Windows firewall is turned on, all I configured there was to allow the FMS .exe files through.
So that's the solution - more detailed info follows below.

At first I could not get client-server RTMFP to work. Using the standard setup and install process, RTMP connections to my instance worked fine but RTMFP connections seemed to hang for a few minutes before eventually failing.
Initially I had tried to configure the elastic IP of my instance (hint: if you are new to EC2: the elastic IP is essentially the instance's static IP that is assigned at that time but which can be changed) using the hostport in fms.ini. Removing the IP from fms.ini's hostport directive re-enabled RTMP connections via the public elastic IP. RTMFP connections failed. The logs gave me these errors:

#Fields: date time x-pid x-status x-ctx x-comment
2011-06-10 09:07:41 3456 (i)2581173 FMS detected IPv6 protocol stack! -
2011-06-10 09:07:41 3456 (i)2581173 FMS config -
2011-06-10 09:07:41 3456 (i)2581173 FMS running in IPv4 protocol stack mode! -
2011-06-10 09:07:41 3456 (i)2581173 Host: ip-0A50DD0A IPv4: 10.80.221.10 -
2011-06-10 09:07:41 3456 (e)2631013 Failed to create listener for adaptor _defaultRoot_, IP 50.19.224.164, port 80: TCCommBridge::createListener 50.19.224.164:80/v4: bind failed!!!. -
2011-06-10 09:07:41 3456 (e)2631013 Failed to create listener for adaptor _defaultRoot_, IP 50.19.224.164, port 443: TCCommBridge::createListener 50.19.224.164:443/v4: bind failed!!!. -
2011-06-10 09:07:41 3456 (e)2631013 Failed to create listener for adaptor _defaultRoot_, IP 50.19.224.164, port 1935: TCCommBridge::createListener 50.19.224.164:1935/v4: bind failed!!!. -
2011-06-10 09:07:41 3456 (i)2631174 Listener started ( _defaultRoot__edge1 ) : localhost:19350/v4 -
2011-06-10 09:07:42 3456 (e)2631114 Failed to start listeners for adaptor _defaultRoot__edge1. -
2011-06-10 09:07:42 3456 (e)2791225 Failed to start edge : _defaultRoot__edge1

Luckily Seth Hodgson from Adobe stepped in and provided tons of great info,. Here's what he told me.

In the Adaptor.xml config file for your FMS server, you'll find an section. Make sure that this is enabled, and then take a look at the following sub-element: /Adaptor/RTMFP/Core/HostPortList/HostPort

When you're running an RTMFP adaptor behind a NAT you need to specify the in-front-of-NAT IP address that your clients will be connecting to in the optional 'public' attribute for this element. Like so:

:19350-65535

Additional background: The port range here, by default 19350-65535, is defined because each FMSCore process that starts up (and the number of these depends on the number of app instances you have running and how they're configured to distribute across FMSCore processes) has its own dedicated RTMFP listener/adaptor. Assume you have 3 app instances and each is configured to run in its own process; then you'll have three FMSCore processes running and each will have its own RTMFP listener running. These listeners acquire the next available port from this range as they come online. So in this case, they should bind 19350, 19351 and 19352 (assuming those ports are available).

When a new client connects to the FMS, it initially is communicating with the FMSEdge process on UDP port 1935, and depending on the app instance the client is trying to connect to, it will be redirected (this is a low-level RTMFP capability, not a traditional RTMP redirect) to the port bound by the RTMFP listener for the FMSCore process hosting the target app instance. As part of this redirect, the RTMFP listener that the client is being redirected to is also notified that a client is being redirected to it, and it sends a packet out toward the client which should be sufficient to punch a hole in the firewall allowing the redirected clients traffic back in over the new port (say, 19351).

When you're NATed, if you don't specify the 'public' attribute above then the server has no way of knowing or discovering its in-front-of-NAT-address and the RTMFP redirect will point at the right port (e.g. 19351) but will use the behind-NAT address, which the client can't reach.

Also, while allowing UDP inbound on ports 19350-65535 (or whatever smaller range you define in your FMS configs) in your EC2 firewall rules doesn't hurt, I don't think you necessarily need to do this. You're probably OK with just allowing UDP in on 1935 and UDP out on any port (allowing traffic outbound on any port may be the default behavior for EC2, but I'm not personally familiar with that).

So there you go - does your head hurt yet? :-)

IIS Error 500.19 When Using Virtual Directories

Tue, 15 Mar 2011 12:00:00 +0100

I've just encountered an annoying error with IIS 7.5 when using virtual directories. Since it took me a while to find a solution I am sharing it here.
I needed to add a virtual directory to an IIS site which allows me to access a bunch of flv files to deliver via progressive download. The virtual directory pointed to a folder outside my webroot and inside the Flash Media Server applications directory.
When I tried to access a file inside this directory via the web browser I ran into an error 500.19 'Cannot read configuration file due to insufficient permissions'.

It took a while and some Google searches until I figured out that the IIS_IUSRS account needed read permission for that folder. To add these I right-clicked the folder in Windows Explorer > Properties > Security > Edit > Add > Advanced > Find Now > Search for IIS_IUSRS > Select > Ok > Ok > Ok > Ok (yes, 4x Ok...).

What a palaver. Why I use IIS? Don't ask, but yes it is a pain to work with at times, as are Windows file permissions. If you want to implement something similar when the virtual directory target is in another Windows domain then you're in for a world of pain.

And one last tip: if you need your IIS site to display detailed error messages then this post by Mike Volodarsk has all the details:
http://mvolo.com/blogs/serverside/archive/2007/07/26/Troubleshoot-IIS7-errors-like-a-pro.aspx

Configuring an Access Database on ColdFusion for 64bit Windows 2008

Mon, 21 Feb 2011 22:19:00 +0100

I've just had to move a website from one Windows 2008 R2 Server (64bit) to another. The site was running on an Access database backend (don't ask...!) and I had forgotten how I managed to set up the datasource a couple of years ago - however I do remember that it was a PITA.

Unsurprisingly it took me a good 2 hours again today until the site was back up and running on the new server and there were a couple of things involved (at least I think these two steps are the important ones):
1) Make sure your site runs in a 32bit Application Pool in IIS. Ok, admittedly I am no longer 100% sure if this is needed but it works for me. I set up the site in IIS and configured it to use its own separate Application Pool. Then I selected 'Application Pools' in the tree under the server node in IIS, selected my site's Application Pool, then chose 'Advanced Settings' on the right under 'Edit Application Pool' and in the window that opened I set 'Enable 32-Bit Applications' to True. I also changed the '.NET Framework Version' to 'No managed code' in order to disable .NET altogether for this site (it does not use .NET and I think some server error 500s I was seeing were caused by this, however I cannot be sure anymore. What I am sure about though is that my site works using this setting :-)

2) Next I needed to set up the datasource. Usually you do this in CF Admin but if you try this on a 64bit Windows machine it is likely that you're presented with an error. If you use the OS's ODBC Data Source Admin then you won't see any Access Drivers listed because the default ODBC Admin is the 64bit version and that one does not have an Access Driver. You must therefore use the 32bit version which can be found at C:\Windows\SysWOW64\odbcad32.exe

Once I set up my datasource using this tool I was able to get my site up and running again.
Hope this helps someone. And no, the site in question is not this blog :-P

Installing ColdFusion 9 on Windows Server 2008 64bit

Thu, 19 Nov 2009 18:23:00 +0100

This blog is slowly turning into a ColdFusion site it seems :-) Blame ColdFusion for that, it's the one application server that I know a bit about and I really like working with.
Today I needed to install CF9 on Windows Server 2008 64bit and I ran into a few issues which forced me to reinstall a few times. I've now managed to install it successfully so here are a two tips that may safe you some hassle if you like me encounter a HTTP Error 404.3 - Not Found.

First off, I was using IIS 7.5. As you may know, you need to install the web server role onto Windows Server 2008 first and it seems that everything labeled IIS6 tools and compatibility tools should be installed as well, so do that first. Then when running the CF installer right click and 'Run as Administrator'. Once I did that it was plain sailing, but not much joy without those two boxes ticked.

Why MLB.com Ditched Silverlight

Tue, 07 Apr 2009 00:13:00 +0100

I know I know, I really should not feel as much Schadenfreude as I do over this topic but it's just too good to miss (and hey, any chance of something like this happening to Adobe and I'm sure the dark side would be all over it ;-)

Some may argue that this is not a big deal - you win some, you lose some - but MLB.com is no small fry. Cnet describes it as 'the Web's most successful subscription service' serving half a million (!) subscribers.
What went on behind the scenes is now starting to emerge as - according to Cnet - Microsoft points the finger at 'a series of glitches and conflicts between the companies'. Moreover, the lawyers are now apparently involved which sounds like a major fallout to me. MLBAM's CEO is even heard talking about an 'ongoing dispute with Microsoft'. Oh dear. Can it be worse than Adobe and Apple banging heads over Flash on the iPhone? Maybe.

I guess we'll have to see how things progress for Silverlight, but I still fail to see the real advantage of the platform, at least from a user's point of view. Sure, it must be great being a .NET developer now being able to hack away at a new platform, using new (and existing) tools, but what problem is this plugin really trying to solve? What does it offer that Flash hasn't been doing for years? I'm a developer myself and naturally curious, but so far I have had next to no urge to even install the Silverlight development tools (which ideally require you to run Windows as you desktop OS).

I know I keep asking this, but where are the impressive Silverlight apps built by the Silverlight community, I mean those that did not make the showcase pages (yes, we;ve seen the Olympics now. And Netflix. Next?), and why does it seem that all the existing showcases are built around a video experience? It's not all about video you know!?
Let's revisit this topic in a year. What do you think the RIA playing field will look like then?

Microsoft Announces Live Smooth Streaming - Adds Copies DVR Capabilities

Fri, 20 Mar 2009 10:48:00 +0100

Many of you may know that MIX09 is in full swing and Microsoft has announced not only Silverlight 3 Beta but also added some new live streaming capabilities to its platform.
Once of those additions is a feature called Live Smooth Streaming which, if I understand it correctly, provides the equivalent to Adobe's dynamic bitrate streaming by offering fallback bitrates if the connection speed on the user's side fluctuates. The term 'Live Smooth Streaming' is a little bit deceptive however since this service - as far as I understand it - is not true streaming at all, however it comes close to a streaming experience. Instead it uses chunks of HTTP progressively downloaded material to provide a stream-like experience. I guess 'Live Smooth HTTP Download' doesn't sound as sexy.

Another feature is the so-called Live PVR, basically a total rip-off of Adobe's DVR functionality introduced recently to FMS which lets users rewind a live event and catch up to it as well. Microsoft describes their service as a 'PVR in the cloud', and it runs on top of IIS 7 and Windows Server 2008. Ben Waggoner has all the details, mixed in with some marketing fluff.

While it's great to see competition take hold in this space I would really wish for Microsoft to be more innovative at times. Of course they are playing catch up with Flash on the Silverlight front, but I generally expect them to be more experienced in the video streaming space (they've been doing this for much longer than Adobe). We've seen a glimpse of the fact that Microsoft is able to innovate during the preview of the out-of-browser install feature in Silverlight 3, but the blatant copy of Adobe's DVR functionality seems a bit cheap to me. If copying can't be avoided then so be it, but couldn't you at least differentiate the feature a little bit, or top it somehow? That would really get Adobe into gear too and maybe speed up some of their own initiatives - I've heard they are working some new FMS features.

Silverlight vs Flash: Video Codec Comparison

Wed, 09 Jul 2008 22:56:00 +0100

By Jan Ozer, producer of Critical Skills for Final Cut Pro Streaming Producers

A while back I shared some playback performance numbers comparing the required CPU horsepower to play VP6, H.264 and VC-1 files. Briefly, in that test, I tested playback from the desktop using the FLV Player, QuickTime Pro and Windows Media Player, respectively.

While testing for my next training DVD, Critical Skills DVD for Final Cut Studio Streaming Producers, I rethought the test, deciding that it made more sense to test using the Flash and Silverlight Players, since that's how most of the audience would view these files. In this lengthy report, I'll detail the procedures and describe my findings.

To ensure that the test was fair, I contacted Kevin Towes from Adobe and Ben Waggoner from Microsoft. I produced the VC-1 file in Expression Encoder 2 using parameters supplied by Ben, and the H.264 file in Sorenson Squeeze using the MainConcept codec. I produced using the High Profile with all quality options set to the max, since this would create both the highest quality file and a file that was the most difficult to decode.

I produced VP6-S and VP6-E files in On2 Flix Pro. I produced all files at 1.6 mbps VBR in 720p configuration (29.97) and we used Inlet Semaphore to analyze the files and make sure that their maximum data rates were similar, since Be was concerned that extraordinary peaks in any file would present excess decode number.

Ben actually produced the Silverlight Player that I used in my test for reasons I'll explain later. You can download the bits he created at www.doceo.com/silverlight/SL_player.zip. I used a stock skin from Adobe Flash CS3 for the Adobe player. You'll note if you play the files that the features map evenly, with similar controls on both players. I uploaded all files to my own web site, www.doceo.com, where they exist until this very day.

Silverlight: http://www.doceo.com/silverlight/test.html
H.264: http://www.doceo.com/h264/test.html
VP6: http://www.doceo.com/flv/test.html
VP6-S: http://www.doceo.com/flvs/test.html

I tested playback on the computers identified below using the following procedures:

- Stopping playback of the files and making sure the file was fully downloaded before playing
- Resizing the browser so that the player was fully presented with no other windows above any portion of the browser
- On Windows systems, I played the file, then recorded the total CPU utilization every second for the duration of the file (about 93 seconds). If the utilization figure didn't change from second to second, I recorded it separately each second (you'll see what I mean if you try this). Then I divided this by the number of samples to produce the average CPU utilization.
- On the Mac, I set Activity Monitor to report once every two seconds, and then captured and reported the average CPU utilization for just the browser.

Here's what I found:

	Flash VP6E	Flash VP6S	Flash H.264 - High	Silverlight

PowerMac Dual 2.7 GHz PPC G5, OS 10.4.11, FireFox, Flash Player 9.0.115.0, SL 1.0.30401.0
Processor (percentage of 2 processors)	72.0%	66.3%	85.8%	108.0%
Drop frames	No	No	Yes	Yes
Estimated frame rate	Full	Full	5-6 fps	1-2 fps
Drop audio	No	No	Yes	No
HP xw4100, 3.0 GHz P4 with HTT, Windows XP, FireFox Flash Player 9.0.124, SL 1.0.30401.0
Processor	54.6%	51.5%	45.1%	52.5%
Drop frames	Yes	Yes	No	No
Estimated frame rate	25 fps	27+ fps	Full	Full
Drop audio	Yes	No	No	No
iMac, 2.0 GHz Core 2 Duo, OSX, Flash 9.0.124.0, SL version 1.0.30401.0
Processor	87.5%	91.7%	NA	NA
Drop frames	Yes	No	Yes - stopped	Yes - lost synch
Estimated frame rate	2 fps	Full	stopped	1 frame/3 seconds
Drop audio	Yes	no	Yes	yes
HP 8710P, 2.2 GHz Core 2 Duao, Vista, IE, Flash 9.0.124.0, SL 2.0.30226.2
Processor	51.9%	52.0%	34.8%	47.3%
Drop frames	No	No	No	No
Estimated frame rate	Full	Full	Full	Full
Drop audio	No	No	No	No
Dell Precision 390, 2.9 GHz Core 2 Duo, XP, IE, Flash 9.0.124.0, SL 2.0.30226.2
Processor	22.7%	17.5%	7.7%	26.0%
Drop frames	No	No	No	No
Estimated frame rate	Full	Full	Full	Full
Drop audio	No	No	No	No

Observations

On the Windows platform, H.264 Flash was always less computationally intense than VP6. On the Mac, the situation was reversed, though I was testing with either older or low power current Macs. I'd be interested if anyone out there with a beefier Mac could run these tests and supply some details.

- VP6-S, which is supposed to be the easy to decode version (think VP6-S for simple) wasn't consistently easier to decode than VP6-E (think VP6-E for excellent). On the two lower end Macs that I tested, however, VP6-S was the only format that played at full frame rate with no audio breaks. On the xw4100, VP6-S played smoothly and without audio breaks, while VP6-E played fewer frames and suffered several audio breaks. If I was producing HD video and I cared about older Mac and Windows computers, I'd strongly consider VP6-S.

- H.264 was never required a higher CPU% than Silverlight, but the difference never mattered. On all computers where one codec failed, the other failed as well. One thing that I learned during this process was that while Windows Media Player does play back using the graphics card CPU (or GPU), Silverlight doesn't. For this reason, it's not as efficient as Windows Media Player.

- The skin used to create the Silverlight plug-in can dramatically impact the CPU required to play the file. For example, the first Silverlight player I created (using a template from Expression Encoder 2), which you can try here (www.doceo.com/SL/SL.html) required 78% of the CPU when playing back on the HP xw4100, compared to 52.5% for the Silverlight player that Ben created. In particular, note that all templates from the Expression Encoder are scalable by default, and scale the player window according to browser size. Given that the Silverlight Player doesn't use the GPU, I wouldn't use an EE2 template for HD content.

If you find this information useful then I highly recommend you check out Jan's latest publications Critical Skills for Final Cut Pro Streaming Producers

What Problem is Silverlight Trying to Solve?

Tue, 27 May 2008 22:52:00 +0100

Usually solutions are there to solve problems, yet I am having a hard time figuring out which problem Silverlight is trying to solve. My view point on Silverlight is that of an end user since I have not yet developed any Silverlight content. This is not down to a lack of interest either, after all it is a much hyped technology, but due to a lack of development tools on my chosen operating system, OSX.

As an end user I have yet to see anything that offers any benefit to me. Quite the opposite actually. When I recently asked about Silverlight demos on the streamingmedia list was pointed to Silverlight.net by a Microsoft employee. I walked away asking myself if this was the cutting edge of Silverlight deployments - surely not, since my experience was along the lines of
- Clicked on showcase
- Received error mesage:
"Silverlight error message, ErrorCode: 3002
ErrorType: ImageError
Messsage: AG_E_NOT_FOUND

- Clicked OK, same message
- Clicked OK, same message
- Clicked OK, same message... and I was out of there.

Today I browsed around itv.com and came across their TV catchup service (UK viewing only I believe). It looked remarkably like Flash, and admittedly I got a bit excited. Since ITV is one of my clients I know that they have a very open mind when it comes to technology, and are happy to use a mix of whatever does the job including Flash, Windows Media as well as Silverlight. Good thinking. Except this time it seems, since the 'Flash' player didn't do anything. I clicked play but it just went black. I tried a different video and again, nothing. Right click.. brings up Silverlight preferences.

That explains it then. I am kidding - I'm not blaming Silverlight for what may simply be a file access problem. But why Silverlight? Is it all down to being forced by Legal to use DRMed content? What else could be the reason? The user certainly does not benefit from this, or am I missing something?

Someone tell me, what itch is Silverlight trying to scratch? Surely even the best developer workflow in the world (at least so I've heard) cannot make up for a broken user experience. I'm holding my breath for the Olympics coverage.

PS: I was given a behind the scenes look at the live streaming at ITV recently. Expect some coverage on that in the next few weeks.

Official: Brits Prefer Flash Video Over Windows Media

Wed, 16 Jan 2008 18:17:00 +0100

Or streaming over download; or Flash over P2P, or online over offline. Who knows, read whatever you like into the fact that 8 times more people access the BBC's iPlayer content via the browser based streaming version (Flash video) rather than the Windows-only, P2P based download player for which the Beeb had received a lot of bad press. Why didn't they listen to me from the start? :-)
For those who don't know, the BBC now offers all TV content for online viewing, on demand for up to one week after it has aired. sorry, but the iPlayer is only accessible if you are in the UK. Silly, I know but then I don't make the rules.