RE: Can not dowload file via http
- From: "William Holmes" <wtholmes@xxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 5 Dec 2005 16:24:26 -0500
Hello,
I know. The problem is a failed connection attempt when the get request has a
.z or .gz extension. Each request is going to the same published web server.
A direct connection to the published web server will allow you to retrieve
the file. This appears to be a interaction between the ISA server and the
published web server.
That being said here are the results that you requested
Original Client IP Client Agent Authenticated Client Service
Server Name Referring Server Destination Host Name Transport
MIME Type Object Source Source Proxy Destination Proxy
Bidirectional Client Host Name Filter Information Network
Interface Raw IP Header Raw Payload Source Port Processing
Time Bytes Sent Bytes Received Result Code HTTP Status Code
Cache Information Error Information Log Record Type Log Time
Destination IP Destination Port Protocol Action Rule
Client IP Client Username Source Network Destination Network HTTP
Method URL
0.0.0.0 Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.12) Gecko/20050922
Fedora/1.0.7-1.1.fc4 Firefox/1.0.7 Reverse Proxy INB-WEB1
- www.cs.cornell.edu TCP - Internet
- 0 6125 215406 579 200
0x40a00000 0xd80 Web Proxy Filter 12/5/2005 4:22:29 PM
128.84.96.101 80 http Allowed Connection www.cs.cornell.edu
24.58.5.221 anonymous External - GET
http://webpub.cs.cornell.edu/courses/cs414/2004fa/cs415-assgt1.zip
0.0.0.0 Microsoft URL Control - 6.00.8862 Reverse Proxy
INB-WEB1 - www.cs.cornell.edu TCP - Internet
- 0 20938 298825 264 200
0x40a00000 0xc00 Web Proxy Filter 12/5/2005 4:06:13 PM
128.84.96.101 80 http Allowed Connection www.cs.cornell.edu
24.5.233.131 anonymous External - GET
http://webpub.cs.cornell.edu/home/yura/Papers/emmcvpr99.zip
0.0.0.0 Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
Reverse Proxy INB-WEB1 - www.cs.cornell.edu TCP -
Internet -
0 47 489 254 206 0x40a00040 0xc00 Web
Proxy Filter 12/5/2005 4:05:51 PM 128.84.96.101 80 http
Allowed Connection www.cs.cornell.edu 24.5.233.131 anonymous
External - GET
http://webpub.cs.cornell.edu/home/yura/Papers/emmcvpr99.zip
0.0.0.0 Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-us) AppleWebKit/125.5.5
(KHTML, like Gecko) Safari/125.12 Reverse Proxy INB-WEB1
- gdiac.cis.cornell.edu TCP - Internet
- 0 150172 6805350 663 200
0x40a00000 0xd80 Web Proxy Filter 12/5/2005 3:53:20 PM
128.84.96.101 80 http Allowed Connection gdiac.cis.cornell.edu
208.31.47.161 anonymous External - GET
http://webpub.cs.cornell.edu/projects/game/2005sp/Downloads/IntrepidExplorers
.zip
0.0.0.0 Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.12) Gecko/20050921 Red
Hat/1.0.7-1.4.1 Firefox/1.0.7 Reverse Proxy INB-WEB1 -
www.cs.cornell.edu TCP - Internet
- 0 35563 1268213 533 1232
0x40800000 0xc82 Web Proxy Filter 12/5/2005 3:51:15 PM
128.84.97.8 80 http Failed Connection Attempt
web8.cs.cornell.edu 128.84.153.62 anonymous External -
GET http://web8.cs.cornell.edu/~jodie/for-ed.zip
0.0.0.0 Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-us) AppleWebKit/125.5.5
(KHTML, like Gecko) Safari/125.12 Reverse Proxy INB-WEB1
- gdiac.cis.cornell.edu TCP - Internet
- 0 7891 285178 659 64
0x40a00000 0xd02 Web Proxy Filter 12/5/2005 3:50:07 PM
128.84.96.101 80 http Failed Connection Attempt
gdiac.cis.cornell.edu 208.31.47.161 anonymous External -
GET
http://webpub.cs.cornell.edu/projects/game/2005sp/Downloads/DifferentWorlds.z
ip
0.0.0.0 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR
1.1.4322; InfoPath.1) Reverse Proxy INB-WEB1 -
www.cs.cornell.edu TCP - Internet
- 0 1 258 490 200
0x40800000 0x800 Web Proxy Filter 12/5/2005 3:48:13 PM
128.84.97.8 80 http Allowed Connection web8.cs.cornell.edu
128.84.96.29 anonymous Internal - GET
http://web8.cs.cornell.edu/~wtholmes/mytest.tar.zip
0.0.0.0 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR
1.1.4322; InfoPath.1) Reverse Proxy INB-WEB1 -
www.cs.cornell.edu TCP - Internet
- 0 1 2132 325 50
0x800000 0x800 Web Proxy Filter 12/5/2005 3:46:49 PM
128.84.97.8 80 http Failed Connection Attempt
web8.cs.cornell.edu 128.84.96.29 anonymous Internal -
GET http://web8.cs.cornell.edu/~wtholmes/mytest.tar.Z
0.0.0.0 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR
1.1.4322; InfoPath.1) Reverse Proxy INB-WEB1 -
www.cs.cornell.edu TCP - Internet
- 0 1 2132 486 50
0x800000 0x880 Web Proxy Filter 12/5/2005 3:42:06 PM
128.84.97.8 80 http Failed Connection Attempt
web8.cs.cornell.edu 128.84.96.29 anonymous Internal -
GET http://web8.cs.cornell.edu/~wtholmes/mytest.tar.Z
0.0.0.0 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR
1.1.4322; InfoPath.1) Reverse Proxy INB-WEB1 -
www.cs.cornell.edu TCP - Internet
- 0 1 258 490 200
0x40800000 0x880 Web Proxy Filter 12/5/2005 3:41:41 PM
128.84.97.8 80 http Allowed Connection web8.cs.cornell.edu
128.84.96.29 anonymous Internal - GET
http://web8.cs.cornell.edu/~wtholmes/mytest.tar.zip
0.0.0.0 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR
1.1.4322; InfoPath.1) Reverse Proxy INB-WEB1 -
www.cs.cornell.edu TCP - Internet
- 0 1 2132 486 50
0x800000 0x880 Web Proxy Filter 12/5/2005 3:41:01 PM
128.84.97.8 80 http Failed Connection Attempt
web8.cs.cornell.edu 128.84.96.29 anonymous Internal -
GET http://web8.cs.cornell.edu/~wtholmes/mytest.tar.z
0.0.0.0 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR
1.0.3705; .NET CLR 1.1.4322) Reverse Proxy INB-WEB1 -
www.cs.cornell.edu TCP - Internet
- 0 20703 56573727 328
200 0x40a00000 0xd00 Web Proxy Filter 12/5/2005 3:32:58 PM
128.84.96.101 80 http Allowed Connection www.cs.cornell.edu
132.236.227.146 anonymous External - GET
http://webpub.cs.cornell.edu/~ves/QAhwkAndEval_files.zip
-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
Sent: Monday, December 05, 2005 4:08 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Can not dowload file via http
http://www.ISAserver.org
Neither of those entries lists "denied".
Search the ISA logs for "log type = web proxy", "url contains .z" and "action
not equal connection status".
-------------------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
-------------------------------------------------------
-----Original Message-----
From: William Holmes [mailto:wtholmes@xxxxxxxxxxxxxx]
Sent: Monday, December 05, 2005 12:57
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Can not dowload file via http
http://www.ISAserver.org
Hello,
Here is the entire log entry for a failed attempt:
Original Client IP Client Agent Authenticated Client Service
Server Name Referring Server Destination Host Name Transport
MIME Type Object Source Source Proxy Destination Proxy
Bidirectional Client Host Name Filter Information Network
Interface Raw IP Header Raw Payload Source Port Processing
Time Bytes Sent Bytes Received Result Code HTTP Status Code
Cache Information Error Information Log Record Type Log Time
Destination IP Destination Port Protocol Action Rule
Client IP Client Username Source Network Destination Network HTTP
Method URL
0.0.0.0 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR
1.1.4322; InfoPath.1) No Reverse Proxy INB-WEB1
www.cs.cornell.edu TCP Internet - -
- - - - 0 1 2132 325
50 0x800000 0x800 Web Proxy Filter 12/5/2005 3:46:48 PM
128.84.97.8 80 http Failed Connection Attempt
web8.cs.cornell.edu 128.84.96.29 anonymous Internal
GET http://web8.cs.cornell.edu/~wtholmes/mytest.tar.Z
Now I rename the file to mytest.tar.zip and try again successfully.
Original Client IP Client Agent Authenticated Client Service
Server Name Referring Server Destination Host Name Transport
MIME Type Object Source Source Proxy Destination Proxy
Bidirectional Client Host Name Filter Information Network
Interface Raw IP Header Raw Payload Source Port Processing
Time Bytes Sent Bytes Received Result Code HTTP Status Code
Cache Information Error Information Log Record Type Log Time
Destination IP Destination Port Protocol Action Rule
Client IP Client Username Source Network Destination Network HTTP
Method URL
0.0.0.0 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR
1.1.4322; InfoPath.1) No Reverse Proxy INB-WEB1
www.cs.cornell.edu TCP Internet - -
- - - - 0 1 258 490
200 0x40800000 0x800 Web Proxy Filter 12/5/2005 3:48:12 PM
128.84.97.8 80 http Allowed Connection web8.cs.cornell.edu
128.84.96.29 anonymous Internal GET
http://web8.cs.cornell.edu/~wtholmes/mytest.tar.zip
Attempting to download files with either .gz or .z extensions fails. A
direct connect to web8 always allows the download.
Thanks
Bill
-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
Sent: Monday, December 05, 2005 2:20 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Can not dowload file via http
http://www.ISAserver.org
The request is not palatable to ISA.
What is the *entire* log entry for that denied request?
-------------------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
-------------------------------------------------------
-----Original Message-----
From: William Holmes [mailto:wtholmes@xxxxxxxxxxxxxx]
Sent: Monday, December 05, 2005 10:54
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Can not dowload file via http
http://www.ISAserver.org
Some Additional Information
Looking at the ISA Log when trying to download this file I see Failed
Connection Attempt under the Action Column. In addition the web browser
displays the following error.
Technical Information (for support personnel)
* Error Code: 500 Internal Server Error. The request is not supported.
(50)
I can browse the parent directory just fine. This error only occurs when I
attempt to download a file. The file does have a double extension in this
case: myfile.tar.gz
Thanks
Bill
________________________________
From: William Holmes [mailto:wtholmes@xxxxxxxxxxxxxx]
Sent: Monday, December 05, 2005 12:01 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Can not dowload file via http
http://www.ISAserver.org
Hello,
I am trying to download a file via http: and I receive the following message.
Internet Explorer cannot download myfile.tar.gz from www.myserver.com
<http://www.myserver.com/> Internet Explorer was not able to open this
Internet Site. The requested site is either unavailable of cannot be found.
Please try again later.
This file is on a published web server. I can download the file from the
source server but not when it is published through ISA. I don't "believe"
that I have any content restrictions setup for the publishing rule in
question. I even we so far as to allow windows executables to download.
What might cause this behavior in ISA 2004. Is there a global configuration
that I am missing that would block files like this?
Thanks
Bill
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
wtholmes@xxxxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
wtholmes@xxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
wtholmes@xxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
