Conference noted::seal

1822.0. "forbidden by rule with long url" by BACHUS::DOBBENI () Fri Feb 28 1997 05:03

Hello, 

A customer is reporting a problem with the AFWU 2.0. If he uses very long URL
names the firewall system will respond with the error message: forbidden by
rule. Following is an extract of the www-proxy.log where you find the error and
the requested URL:
Feb 28 10:31:35 fwleft wwwproxy[5318]: Log: HTAA_PROXY_ACCESS: proxy access 'mai
lleft.mcs1.bro.dec.com/10.0.1.2' '-' 'GET http://www.iee.org.uk/cgi-bin/retrieve
.cgi/320__01_0blhost_3a0_022fhome_2flocal_2fhttp_2fhttp_2ddata_2fLibrary_2fCatal
ogue_2fIndex_2fieelib_03Y3685839_203686159_20_2fhome_2flocal_2fhttp_2fhttp_2ddat
a_2fLibrary_2fCatalogue_2fBuild_2fJan97_2fData_2fcairs97_2ejan_04_0blocalhost_3a
0_059_2fhome_2flocal_2fhttp_2fhttp_2ddata_2fLibrary_2fCatalogue_2fIndex_2fieelib
_06Y3685839_203686159_20_2fhome_2flocal_2fhttp_2fhttp_2ddata_2fLibrary_2fCatalog
ue_2fBuild_2fJan97_2fData_2fcairs97_2ejan_07_01_00 HTTP/1.0'

REMARK: This long URL works ok if you try it from an internal digital system
through the current digital firewall.

I could reproduce the customers problem with a 2.1 firewall system and it is
due to the long name, if you shorten the name it would work ok.

Best Regards,

Mia Dobbeni
Digital MCS Network Support

This problem has been acknowledged by engineering as being a bu in the current
version of the product. It is olved in the 3.0 kit.

Mia