NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] @-sign in URL (proxy mode)



I don't know if this helps, but you can prevent (completely) the HTTP
security server from making sure that client requests do not contain
illegal characters by turning the "http_check_request_validity"
Attribute to "false". You can also prevent (completely) the HTTP
security server from making sure that client responses do not contain
illegal characters by turning the "http_check_response_validity"
Attribute to "false" The attributes were added to the objects.C file in
SP3 if I am not mistaken.

Hope this helps,

David Knoll
UpBIT Solutions Ltd


Tel:+ 972-3-6476387
Fax:+ 972-3-6476396
Cellular:+ 972-54-496357

E-mail: [email protected]

Upbit Solutions Ltd
 9 Nissan Street
Tel-Aviv 69715, Israel
--------------------------------------------
This message may contain confidential and/or proprietary information,
and is intended only for the person / entity to whom it was originally
addressed. The content of this message may contain private views and
opinions which do not constitute a formal disclosure or commitment
unless specifically stated.







-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[email protected]] On Behalf Of
Thomas Borger
Sent: Thursday, January 17, 2002 2:10 PM
To: [email protected]
Subject: [FW-1] @-sign in URL (proxy mode)

Hi,

We use the FW1 Ver. 4.1 SP5 on NT.
In our rulebase we use a rule in http-proxy-mode with a http-resource.
In the most time it works but in the case that a user insert a @-sign in
the
URL (e.g. a email address from an inputbox in a htnl formular) then the
firewall returns an access denied.
The logentry is "malformed request".

Have anyone a idea to solve this problem?

regards

Thomas

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.