I tried something, just for kicks. On my default Internet access rule I unchecked "HTTP Filter". It didn't affect anything--I still get the exact same error. However, now when I go to re-check HTTP Filter for my default Internet access rule, that filter is no longer present. How do I get it back? Rob -----Original Message----- From: Rob Moore Sent: Thursday, September 30, 2004 11:56 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: Download error http://www.ISAserver.org Cool, I could get used to this logging! Anyway, the sample result is quite long (I've included it at the end). But here's the most Filter Information line: Blocked by the HTTP security filter: the response content is encoded and cannot be scanned. How do I fix that? Here's the whole result: Original Client IP Client Agent Authenticated Client Service Server Name Referring Server Destination Host Name Transport MIME Type Object Source Source Proxy Destination Proxy Bidirectional Client Host Name Network Interface Raw IP Header Raw Payload Source Port Processing Time Bytes Sent Bytes Received Result Code HTTP Status Code Cache Information Error Information Log Record Type Log Time Destination IP Destination Port Protocol Action Rule Client IP Client Username Source Network Destination Network HTTP Method URL Filter Information 0.0.0.0 Debian APT-HTTP/1.3 Proxy PHL-ISA2 - 194.109.137.218 TCP - Internet 0 297 2282 1024 12217 0x800002 0xd00 Web Proxy Filter 9/30/2004 10:45:15 AM 194.109.137.218 80 http Denied Connection Internal Access to Internet 172.17.201.108 anonymous Internal External GET http://194.109.137.218/dists/stable/updates/main/binary-i386/Packages.gz Blocked by the HTTP security filter: the response content is encoded and cannot be scanned -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Thursday, September 30, 2004 11:39 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: Download error http://www.ISAserver.org If you're using MSDE logging, you can go to Monitoring-->Logging tab. Define a query for "last 24 hours" and "Action=Denied connection" and "Client-IP=<yourtestclientIP>". When the query finishes, add "Filter Information" to the display and see what data it gives you for those requests. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! ----- Original Message ----- From: "Rob Moore" <RMoore@xxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Thursday, September 30, 2004 08:24 Subject: [isalist] Download error http://www.ISAserver.org I have a user trying to download the file Sources.gz, from the site http://ftp2.de.debian.org/debian/dists/unstable/non-free/source/. When we go there, we can download some files but not that one. We get this error: * Error Code: 502 Proxy Error. The request was rejected by the HTTP filter. Contact your ISA Server administrator. (12217) * IP Address: 195.71.9.196 * Date: 9/30/2004 3:18:41 PM * Server: phl-isa2.AFSC.local * Source: web filter This is an ISA 2004 server running on Windows Server 2003. Can you tell me what might be wrong and how I might fix it? I tried filtering the logs on the ISA server for the URL above and didn't see anything. Nor did I see anything in the Event Viewer. I also tried looking in the ISA help file. There doesn't SEEM to be anything in the HTTP filter that would be blocking it. Any suggestions? Thanks, Rob ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: rmoore@xxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: rmoore@xxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx