RE: Can not dowload file via http

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 5 Dec 2005 15:06:44 -0600

Are you logging filter information?

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://spaces.msn.com/members/drisa/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
**Who is John Galt?**

 

> -----Original Message-----
> From: William Holmes [mailto:wtholmes@xxxxxxxxxxxxxx] 
> Sent: Monday, December 05, 2005 2:57 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Can not dowload file via http
> 
> http://www.ISAserver.org
> 
> Hello, 
> 
> Here is the entire log entry for a failed attempt:
> 
> 
> Original Client IP    Client Agent    Authenticated Client    Service
> Server Name   Referring Server        Destination Host Name   
> Transport
> MIME Type     Object Source   Source Proxy    Destination Proxy
> Bidirectional Client Host Name        Filter Information      Network
> Interface     Raw IP Header   Raw Payload     Source Port     
> Processing
> Time  Bytes Sent      Bytes Received  Result Code     HTTP Status Code
> Cache Information     Error Information       Log Record Type Log Time
> Destination IP        Destination Port        Protocol        
> Action        Rule
> Client IP     Client Username Source Network  Destination 
> Network       HTTP
> Method        URL
> 0.0.0.0       Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 
> 5.2; SV1; .NET CLR
> 1.1.4322; InfoPath.1) No      Reverse Proxy   INB-WEB1
> www.cs.cornell.edu    TCP             Internet        -       -
> -             -       -       -       0       1       2132    325
> 50    0x800000        0x800   Web Proxy Filter        
> 12/5/2005 3:46:48 PM
> 128.84.97.8   80      http    Failed Connection Attempt
> web8.cs.cornell.edu   128.84.96.29    anonymous       Internal
> GET   http://web8.cs.cornell.edu/~wtholmes/mytest.tar.Z
> 
> 
> Now I rename the file to mytest.tar.zip and try again successfully.
> 
> 
> Original Client IP    Client Agent    Authenticated Client    Service
> Server Name   Referring Server        Destination Host Name   
> Transport
> MIME Type     Object Source   Source Proxy    Destination Proxy
> Bidirectional Client Host Name        Filter Information      Network
> Interface     Raw IP Header   Raw Payload     Source Port     
> Processing
> Time  Bytes Sent      Bytes Received  Result Code     HTTP Status Code
> Cache Information     Error Information       Log Record Type Log Time
> Destination IP        Destination Port        Protocol        
> Action        Rule
> Client IP     Client Username Source Network  Destination 
> Network       HTTP
> Method        URL
> 0.0.0.0       Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 
> 5.2; SV1; .NET CLR
> 1.1.4322; InfoPath.1) No      Reverse Proxy   INB-WEB1
> www.cs.cornell.edu    TCP             Internet        -       -
> -             -       -       -       0       1       258     490
> 200   0x40800000      0x800   Web Proxy Filter        
> 12/5/2005 3:48:12 PM
> 128.84.97.8   80      http    Allowed Connection      
> web8.cs.cornell.edu
> 128.84.96.29  anonymous       Internal                GET
> http://web8.cs.cornell.edu/~wtholmes/mytest.tar.zip
> 
> Attempting to download files with either .gz or .z extensions 
> fails.  A
> direct connect to web8 always allows the download.
> 
> Thanks
> 
> Bill
> 
> 
> 
> -----Original Message-----
> From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] 
> Sent: Monday, December 05, 2005 2:20 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Can not dowload file via http
> 
> http://www.ISAserver.org
> 
> The request is not palatable to ISA.
> What is the *entire* log entry for that denied request?
> 
> 
> -------------------------------------------------------
>    Jim Harrison
>    MCP(NT4, W2K), A+, Network+, PCG
>    http://isaserver.org/Jim_Harrison/
>    http://isatools.org
>    Read the help / books / articles!
> -------------------------------------------------------
>  
> 
> -----Original Message-----
> From: William Holmes [mailto:wtholmes@xxxxxxxxxxxxxx] 
> Sent: Monday, December 05, 2005 10:54
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Can not dowload file via http
> 
> http://www.ISAserver.org
> 
> 
> Some Additional Information
> 
>  
> 
> Looking at the ISA Log when trying to download this file I see Failed
> Connection Attempt under the Action Column. In addition the 
> web browser
> displays the following error.
> 
>  
> 
> Technical Information (for support personnel)
> 
> *     Error Code: 500 Internal Server Error. The request is 
> not supported.
> (50) 
> 
>  
> 
> I can browse the parent directory just fine. This error only 
> occurs when I
> attempt to download a file.   The file does have a double 
> extension in this
> case: myfile.tar.gz
> 
>  
> 
> Thanks
> 
> Bill
> 
>  
> 
>  
> 
>  
> 
> ________________________________
> 
> From: William Holmes [mailto:wtholmes@xxxxxxxxxxxxxx]
> Sent: Monday, December 05, 2005 12:01 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Can not dowload file via http
> 
>  
> 
> http://www.ISAserver.org
> 
> Hello,
> 
>  
> 
> I am trying to download a file via http: and I receive the 
> following message.
> Internet Explorer cannot download  myfile.tar.gz from www.myserver.com
> <http://www.myserver.com/>   Internet Explorer was not able 
> to open this
> Internet Site. The requested site is either unavailable of 
> cannot be found.
> Please try again later.
> 
>  
> 
> This file is on a published web server. I can download the 
> file from the
> source server but not when it is published through ISA.  I 
> don't "believe"
> that I have any content restrictions setup for the publishing rule in
> question.  I even we so far as to allow windows executables 
> to download.
> 
>  
> 
> What might cause this behavior in ISA 2004. Is there a global 
> configuration
> that I am missing that would block files like this?
> 
>  
> 
> Thanks
> 
> 
> Bill
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> wtholmes@xxxxxxxxxxxxxx To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx 
> 
> All mail to and from this domain is GFI-scanned.
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> wtholmes@xxxxxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion 
> List as: tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 


Other related posts: