Re: Download error
- From: "Aman Bedi" <gurkirpal.bedi@xxxxxxxxxxx>
- To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 30 Sep 2004 15:25:24 -0400
Hi Rob,
In isa 2004, on ur HTTP rule ..where did u see "HTTP FILTER" ?
Where did u disable it ? I don't see it anywhere in my rules.
The only place I see it is .... in ISA -> configuration - > Addins -> Web
Filters.. -> "HTTP Filter"
Here u can enable and disable it ..
Scanbuy Inc
Aman Bedi | Systems/Network Administrator (MCSD, MCSA 2000, MCSA 2003)
54 West 39th Street, 4th Floor, New York, NY 10018 | Fax +1(212) 202-4318 |
Phone +1(212) 278-0178 ext 234 | www.scanbuy.com
----------------------------------------------------------------------------
----------------------------------------------------------------------------
-------------------------------------
-----Original Message-----
From: Rob Moore [mailto:RMoore@xxxxxxxx]
Sent: Thursday, September 30, 2004 3:05 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Download error
http://www.ISAserver.org
I tried something, just for kicks. On my default Internet access rule I
unchecked "HTTP Filter". It didn't affect anything--I still get the
exact same error. However, now when I go to re-check HTTP Filter for my
default Internet access rule, that filter is no longer present. How do I
get it back?
Rob
-----Original Message-----
From: Rob Moore
Sent: Thursday, September 30, 2004 11:56 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Download error
http://www.ISAserver.org
Cool, I could get used to this logging!
Anyway, the sample result is quite long (I've included it at the end).
But here's the most Filter Information line: Blocked by the HTTP
security filter: the response content is encoded and cannot be scanned.
How do I fix that?
Here's the whole result:
Original Client IP Client Agent Authenticated Client Service
Server Name Referring Server Destination Host Name
Transport MIME Type Object Source Source Proxy
Destination Proxy Bidirectional Client Host Name Network
Interface Raw IP Header Raw Payload Source Port
Processing Time Bytes Sent Bytes Received Result Code HTTP
Status Code Cache Information Error Information Log
Record Type Log Time Destination IP Destination Port
Protocol Action Rule Client IP Client Username Source
Network Destination Network HTTP Method URL Filter
Information
0.0.0.0 Debian APT-HTTP/1.3 Proxy PHL-ISA2 -
194.109.137.218 TCP - Internet
0 297 2282 1024 12217 0x800002 0xd00
Web Proxy Filter 9/30/2004 10:45:15 AM 194.109.137.218 80
http Denied Connection Internal Access to Internet
172.17.201.108 anonymous Internal External GET
http://194.109.137.218/dists/stable/updates/main/binary-i386/Packages.gz
Blocked by the HTTP security filter: the response content is encoded and
cannot be scanned
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Thursday, September 30, 2004 11:39 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Download error
http://www.ISAserver.org
If you're using MSDE logging, you can go to Monitoring-->Logging tab.
Define a query for "last 24 hours" and "Action=Denied connection" and
"Client-IP=<yourtestclientIP>".
When the query finishes, add "Filter Information" to the display and see
what data it gives you for those requests.
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
----- Original Message -----
From: "Rob Moore" <RMoore@xxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Thursday, September 30, 2004 08:24
Subject: [isalist] Download error
http://www.ISAserver.org
I have a user trying to download the file Sources.gz, from the site
http://ftp2.de.debian.org/debian/dists/unstable/non-free/source/. When
we go there, we can download some files but not that one. We get this
error:
* Error Code: 502 Proxy Error. The request was rejected by the HTTP
filter. Contact your ISA Server administrator. (12217)
* IP Address: 195.71.9.196
* Date: 9/30/2004 3:18:41 PM
* Server: phl-isa2.AFSC.local
* Source: web filter
This is an ISA 2004 server running on Windows Server 2003.
Can you tell me what might be wrong and how I might fix it? I tried
filtering the logs on the ISA server for the URL above and didn't see
anything. Nor did I see anything in the Event Viewer. I also tried
looking in the ISA help file. There doesn't SEEM to be anything in the
HTTP filter that would be blocking it. Any suggestions?
Thanks,
Rob
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
rmoore@xxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
rmoore@xxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gurkirpal.bedi@xxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
