Are you logging filter information? Thomas W Shinder, M.D. Site: www.isaserver.org Blog: http://spaces.msn.com/members/drisa/ Book: http://tinyurl.com/3xqb7 MVP -- ISA Firewalls **Who is John Galt?** > -----Original Message----- > From: William Holmes [mailto:wtholmes@xxxxxxxxxxxxxx] > Sent: Monday, December 05, 2005 2:57 PM > To: [ISAserver.org Discussion List] > Subject: [isalist] RE: Can not dowload file via http > > http://www.ISAserver.org > > Hello, > > Here is the entire log entry for a failed attempt: > > > Original Client IP Client Agent Authenticated Client Service > Server Name Referring Server Destination Host Name > Transport > MIME Type Object Source Source Proxy Destination Proxy > Bidirectional Client Host Name Filter Information Network > Interface Raw IP Header Raw Payload Source Port > Processing > Time Bytes Sent Bytes Received Result Code HTTP Status Code > Cache Information Error Information Log Record Type Log Time > Destination IP Destination Port Protocol > Action Rule > Client IP Client Username Source Network Destination > Network HTTP > Method URL > 0.0.0.0 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT > 5.2; SV1; .NET CLR > 1.1.4322; InfoPath.1) No Reverse Proxy INB-WEB1 > www.cs.cornell.edu TCP Internet - - > - - - - 0 1 2132 325 > 50 0x800000 0x800 Web Proxy Filter > 12/5/2005 3:46:48 PM > 128.84.97.8 80 http Failed Connection Attempt > web8.cs.cornell.edu 128.84.96.29 anonymous Internal > GET http://web8.cs.cornell.edu/~wtholmes/mytest.tar.Z > > > Now I rename the file to mytest.tar.zip and try again successfully. > > > Original Client IP Client Agent Authenticated Client Service > Server Name Referring Server Destination Host Name > Transport > MIME Type Object Source Source Proxy Destination Proxy > Bidirectional Client Host Name Filter Information Network > Interface Raw IP Header Raw Payload Source Port > Processing > Time Bytes Sent Bytes Received Result Code HTTP Status Code > Cache Information Error Information Log Record Type Log Time > Destination IP Destination Port Protocol > Action Rule > Client IP Client Username Source Network Destination > Network HTTP > Method URL > 0.0.0.0 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT > 5.2; SV1; .NET CLR > 1.1.4322; InfoPath.1) No Reverse Proxy INB-WEB1 > www.cs.cornell.edu TCP Internet - - > - - - - 0 1 258 490 > 200 0x40800000 0x800 Web Proxy Filter > 12/5/2005 3:48:12 PM > 128.84.97.8 80 http Allowed Connection > web8.cs.cornell.edu > 128.84.96.29 anonymous Internal GET > http://web8.cs.cornell.edu/~wtholmes/mytest.tar.zip > > Attempting to download files with either .gz or .z extensions > fails. A > direct connect to web8 always allows the download. > > Thanks > > Bill > > > > -----Original Message----- > From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] > Sent: Monday, December 05, 2005 2:20 PM > To: [ISAserver.org Discussion List] > Subject: [isalist] RE: Can not dowload file via http > > http://www.ISAserver.org > > The request is not palatable to ISA. > What is the *entire* log entry for that denied request? > > > ------------------------------------------------------- > Jim Harrison > MCP(NT4, W2K), A+, Network+, PCG > http://isaserver.org/Jim_Harrison/ > http://isatools.org > Read the help / books / articles! > ------------------------------------------------------- > > > -----Original Message----- > From: William Holmes [mailto:wtholmes@xxxxxxxxxxxxxx] > Sent: Monday, December 05, 2005 10:54 > To: [ISAserver.org Discussion List] > Subject: [isalist] RE: Can not dowload file via http > > http://www.ISAserver.org > > > Some Additional Information > > > > Looking at the ISA Log when trying to download this file I see Failed > Connection Attempt under the Action Column. In addition the > web browser > displays the following error. > > > > Technical Information (for support personnel) > > * Error Code: 500 Internal Server Error. The request is > not supported. > (50) > > > > I can browse the parent directory just fine. This error only > occurs when I > attempt to download a file. The file does have a double > extension in this > case: myfile.tar.gz > > > > Thanks > > Bill > > > > > > > > ________________________________ > > From: William Holmes [mailto:wtholmes@xxxxxxxxxxxxxx] > Sent: Monday, December 05, 2005 12:01 PM > To: [ISAserver.org Discussion List] > Subject: [isalist] Can not dowload file via http > > > > http://www.ISAserver.org > > Hello, > > > > I am trying to download a file via http: and I receive the > following message. > Internet Explorer cannot download myfile.tar.gz from www.myserver.com > <http://www.myserver.com/> Internet Explorer was not able > to open this > Internet Site. The requested site is either unavailable of > cannot be found. > Please try again later. > > > > This file is on a published web server. I can download the > file from the > source server but not when it is published through ISA. I > don't "believe" > that I have any content restrictions setup for the publishing rule in > question. I even we so far as to allow windows executables > to download. > > > > What might cause this behavior in ISA 2004. Is there a global > configuration > that I am missing that would block files like this? > > > > Thanks > > > Bill > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Visit TechGenix.com for more information about our other sites: > http://www.techgenix.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > wtholmes@xxxxxxxxxxxxxx To unsubscribe visit > http://www.webelists.com/cgi/lyris.pl?enter=isalist > Report abuse to listadmin@xxxxxxxxxxxxx > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Visit TechGenix.com for more information about our other sites: > http://www.techgenix.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > jim@xxxxxxxxxxxx To unsubscribe visit > http://www.webelists.com/cgi/lyris.pl?enter=isalist > Report abuse to listadmin@xxxxxxxxxxxxx > > All mail to and from this domain is GFI-scanned. > > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Visit TechGenix.com for more information about our other sites: > http://www.techgenix.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > wtholmes@xxxxxxxxxxxxxx > To unsubscribe visit > http://www.webelists.com/cgi/lyris.pl?enter=isalist > Report abuse to listadmin@xxxxxxxxxxxxx > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Visit TechGenix.com for more information about our other sites: > http://www.techgenix.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion > List as: tshinder@xxxxxxxxxxxxxxxxxx > To unsubscribe visit > http://www.webelists.com/cgi/lyris.pl?enter=isalist > Report abuse to listadmin@xxxxxxxxxxxxx > >