[isalist] Re: Still getting PDF error - ISA 2006/WPR
- From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Tue, 22 Aug 2006 23:20:14 -0700
The error message is (almost) clear - the web site responded with a
combination of headers that ISA found distasteful.
Unfortunately, the only way to know what they were is to get a capture
of the traffic as it flows between the client, ISA and server.
This means you'll need two separate instances of NetMon running; one
capturing at the internal side and the other capturing at the external
side.
Once you have that, you can look into the capture to see what the last
request or response that ISA choked on.
You can send them to me if you don't feel comfy with that - I like
sniffing packets....
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Paul Laudenslager
Sent: Tuesday, August 22, 2006 9:50 PM
To: isalist@xxxxxxxxxxxxx
Cc: support-team@xxxxxxxxxxxx
Subject: [isalist] Still getting PDF error - ISA 2006/WPR
Hi Everyone,
It looks as though I'm dealing with a web proxy filter issue. Is there
a way to edit the web proxy filter?
The attached .jpg shows the error..
Error Code: 500 Internal Server Error. The HTTP message includes an
unsupported header or an unsupported combination of headers. (12156)
...when trying to open a .pdf attachment through the firewall. This
occurs with IE and Firefox.
It works FINE when surfing the local private IP address but NOT the
public ipaddress through the firewall.
If I try and unselect the Web Proxy Filter in the HTTP properties for
this rule, it states
This application filter is used by the corresponding protocol at the
enterprise level. Therefore, it cannot be deselected.
I've tried modifying this web publishing rule's properties. Under the
Traffic tab, I've tried configuring HTTP thinking it was a header issue.
However all METHODS, all EXTENSIONS, and all HEADERS are allowed.
Attachments that ARE WORKING through the firewall are...
.jpg
.doc
.bmp
.txt
I did send an attachment of a zone file (just a standard notepad
document) that was named virginia.com.zone that did NOT WORK. It failed
with the same error message as the .jpg attachment.
Any suggestions on what I should try next? I'm at a loss and it's now
costing me money as I'm loosing some good customers.
Thanks in advance for your time and consideration.
Paul
All mail to and from this domain is GFI-scanned.
Other related posts:
