[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] Malformed URLs
Greetings!
John W. Kralik wrote:
The firewall does not seem to allow passage of "white space"
characters in URL requests. (Such as http://www.anywhere.com/white
space here.html) We are using MS IE Explorer 6.0, which fills in the
spaces with %20 characters.
The firewall behaviour is correct - it's MSIE that goofs.
A correct request looks like
COMMAND URL PROTOCOL
optional: header
optional: header
(double CR/LF)
with COMMAND usually being get/post/put/head/connect and URL *not*
containing whitespaces as the whitespaces are used to separate COMMAND,
URL and PROTOCOL (usually HTTP/1.0 or HTTP/1.1). AFAIK you can tweak
MSIE for compliant behaviour, so you'll have to patch the clients.
Bye
Volker
--
-------------------------------------------------------------------
[email protected] discon GmbH
IT-Security Consulting Wrangelstrasse 100
http://www.discon.de/ 10997 Berlin, Germany
-------------------------------------------------------------------
PGP-Fingerprint: 5323 a4f7 a7c2 b8ef 4653 05ce d2ea 2b74 b94c c68e
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
