Welcome to ISAserver.org

Getting 502 proxy error after upgrading to SP2

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> HTTP Filtering >> Getting 502 proxy error after upgrading to SP2

Page: [1] 2 3 4 next > >>

Message

<< Older Topic Newer Topic >>

Getting 502 proxy error after upgrading to SP2 - 6.Feb.2006 6:30:37 PM

bedpan

Posts: 34
Joined: 15.Sep.2004
From: canada
Status: offline

Trying to find the cause of an error that has started to occur this week seemingly after installing SP2 for ISA2004.

A couple website are now coming back with 502 Proxy error's and will not load. The site I have been testing with is www.mix999.com Below is the error message as reported by the browser. Pretty straight forward setup. ISA is my Default Gateway and runs as a proxy/FW. I have put my machine into a top rule with all access to everything and it is still occuring. Any thoughts on the problem is appreciated.

Technical Information (for support personnel)
Error Code: 502 Proxy Error. Not implemented (-2147467263)
IP Address: 66.244.221.238
Date: 2/6/2006 5:06:47 PM
Server: server13.theorthoticgroup.com
Source: web filter

Mike

Post #: 1

Featured Links*

RE: Getting 502 proxy error after upgrading to SP2 - 6.Feb.2006 7:32:33 PM

LLigetfa

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline

I can confirm that I get the same error with my SP2 ISA.

_____________________________

The School of Hard Knocks is a mean teacher. She gives the exam before the lesson.

(in reply to bedpan)

Post #: 2

RE: Getting 502 proxy error after upgrading to SP2 - 7.Feb.2006 4:21:19 PM

bedpan

Posts: 34
Joined: 15.Sep.2004
From: canada
Status: offline

Thanks Kindly for confirming for me LL. I am glad I am not the only one!

Anyone have any suggestions on solving this issue? I have spend a couple of hours poking around ISA trying to understand and figure out what might be causing it. I am not a ISA Pro by any stretch though!

Thanks in Advance,

Mike

quote:

ORIGINAL: LLigetfa

I can confirm that I get the same error with my SP2 ISA.

(in reply to LLigetfa)

Post #: 3

RE: Getting 502 proxy error after upgrading to SP2 - 7.Feb.2006 5:00:57 PM

bedpan

Posts: 34
Joined: 15.Sep.2004
From: canada
Status: offline

Well I have found a work around.. It appears to be some sort of bug introduced in SP2 in the caching. I disabled caching and the page started working. Re-enabled and it stopped again. So I created a rule to never cache results for this site.

Not a big deal but would love to know why this would happen.

Mike

(in reply to bedpan)

Post #: 4

RE: Getting 502 proxy error after upgrading to SP2 - 8.Feb.2006 12:17:00 PM

Walzing

Posts: 20
Joined: 1.Sep.2004
Status: offline

Hi,

same problem here. Workaround doesn't work.

cu

(in reply to bedpan)

Post #: 5

RE: Getting 502 proxy error after upgrading to SP2 - 8.Feb.2006 3:25:00 PM

bedpan

Posts: 34
Joined: 15.Sep.2004
From: canada
Status: offline

Well my work around appears to not be working any more either. Crap!

This is the only site I can get this error on consistantly. Anyone have any others? (www.mix999.com)

Any thoughts on the issue?

Wierd that It was working yesterday and now not today. I think it maybe caching related but I am not sure.

Mike

(in reply to Walzing)

Post #: 6

RE: Getting 502 proxy error after upgrading to SP2 - 8.Feb.2006 3:32:01 PM

bedpan

Posts: 34
Joined: 15.Sep.2004
From: canada
Status: offline

Alright, I tweaked my No-Cache rule again and it seems to be working again.

Here is my rule right now..

To: Domain Name Set - Contains 'www.mix999.com'
Cache Store and Retrieval: Only if a valid version exists, and Never, no content will ever be cached
HTTP: Uncheck Enable HTTP Caching
FTP: Uncheck Enable FTP Caching
Advanced: Check Do not cache Objects larger than: 1kb

Working right now... Yesterday I had missed unchecking the Enable HTTP Caching.

Anyone having/not having luck with this?

Mike

(in reply to bedpan)

Post #: 7

RE: Getting 502 proxy error after upgrading to SP2 - 8.Feb.2006 4:23:15 PM

muntos

Posts: 61
Joined: 30.Jul.2004
Status: offline

Is not a SP2 error, I have the same problem but I didn't installed SP2 yet.

(in reply to bedpan)

Post #: 8

RE: Getting 502 proxy error after upgrading to SP2 - 8.Feb.2006 5:35:26 PM

tkuskie

Posts: 2
Joined: 22.Feb.2002
Status: offline

I have started seeing the same behavior. Under SP1 there was no issues now I get the dreaded...

Error Code: 502 Proxy Error. The HTTP request includes a non-supported header. Contact your ISA Server administrator. (12156)
IP Address: 205.174.16.50
Date: 2/8/2006 4:20:08 PM
Server: isasrv.rmhgroup.com
Source: proxy

After installing SP2! I am experiencing this on atleast 2 sites know http://www.delta.com and sub pages within http://jefferson.lib.co.us. Where is Tom? We need help... I am about to call M$ and get a ticket started.

(in reply to muntos)

Post #: 9

RE: Getting 502 proxy error after upgrading to SP2 - 8.Feb.2006 7:52:31 PM

LLigetfa

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline

Your delta link fails for me as well, but the jefferson link brings up the home page fine.

_____________________________

The School of Hard Knocks is a mean teacher. She gives the exam before the lesson.

(in reply to tkuskie)

Post #: 10

RE: Getting 502 proxy error after upgrading to SP2 - 9.Feb.2006 3:02:01 PM

bedpan

Posts: 34
Joined: 15.Sep.2004
From: canada
Status: offline

Delta problem for me as well.. The jefferson does work on my end though..

Any other sites? Anyone else having problems?

quote:

ORIGINAL: tkuskie

I have started seeing the same behavior. Under SP1 there was no issues now I get the dreaded...

Error Code: 502 Proxy Error. The HTTP request includes a non-supported header. Contact your ISA Server administrator. (12156)
IP Address: 205.174.16.50
Date: 2/8/2006 4:20:08 PM
Server: isasrv.rmhgroup.com
Source: proxy

After installing SP2! I am experiencing this on atleast 2 sites know http://www.delta.com and sub pages within http://jefferson.lib.co.us. Where is Tom? We need help... I am about to call M$ and get a ticket started.

(in reply to tkuskie)

Post #: 11

RE: Getting 502 proxy error after upgrading to SP2 - 12.Feb.2006 9:06:47 PM

ricardobecker

Posts: 3
Joined: 12.Feb.2006
Status: offline

I have the same problem... just after the SP2...

Try the search engine of this site... www.mercadolivre.com.br

I've hope...

_____________________________

Ricardo Saddi Becker
MCSA
Becker Consultoria
Cuiab� - Mato Grosso - Brazil

(in reply to bedpan)

Post #: 12

RE: Getting 502 proxy error after upgrading to SP2 - 12.Feb.2006 9:16:52 PM

ricardobecker

Posts: 3
Joined: 12.Feb.2006
Status: offline

Hey guys, I have a tip...

look the alerts, and you will see something like "The response was rejectec because....."

The detailed information...

Description: ISA Server was unable to process a response body from /MLB-39125253-placa-de-captura-de-tvfm-encore-com-controle-remoto-nf-_JM because the response was compressed by the ISO-8859-1 method, which is not supported by ISA Server. As a result, the response was discarded. This happens when the server ignores the request from ISA Server for GZIP compression and instead compresses the response with ISO-8859-1.

What is ISO-8859-1 method ??? How can we turn the ISA Server compatible with it ???

Good luck for us !

_____________________________

Ricardo Saddi Becker
MCSA
Becker Consultoria
Cuiab� - Mato Grosso - Brazil

(in reply to bedpan)

Post #: 13

RE: Getting 502 proxy error after upgrading to SP2 - 12.Feb.2006 11:16:29 PM

bedpan

Posts: 34
Joined: 15.Sep.2004
From: canada
Status: offline

Interesting. I will look into this on Monday morning. I wonder if we can figure out what HTTP Server software is doing this. Might help understand the issue a bit more.

Mike

quote:

ORIGINAL: ricardobecker

Hey guys, I have a tip...

look the alerts, and you will see something like "The response was rejectec because....."

The detailed information...

Description: ISA Server was unable to process a response body from /MLB-39125253-placa-de-captura-de-tvfm-encore-com-controle-remoto-nf-_JM because the response was compressed by the ISO-8859-1 method, which is not supported by ISA Server. As a result, the response was discarded. This happens when the server ignores the request from ISA Server for GZIP compression and instead compresses the response with ISO-8859-1.

What is ISO-8859-1 method ??? How can we turn the ISA Server compatible with it ???

Good luck for us !

(in reply to ricardobecker)

Post #: 14

RE: Getting 502 proxy error after upgrading to SP2 - 12.Feb.2006 11:58:36 PM

ricardobecker

Posts: 3
Joined: 12.Feb.2006
Status: offline

quote:

ORIGINAL: bedpan

Interesting. I will look into this on Monday morning. I wonder if we can figure out what HTTP Server software is doing this. Might help understand the issue a bit more.

Mike

quote:

ORIGINAL: ricardobecker

Hey guys, I have a tip...

look the alerts, and you will see something like "The response was rejectec because....."

The detailed information...

Description: ISA Server was unable to process a response body from /MLB-39125253-placa-de-captura-de-tvfm-encore-com-controle-remoto-nf-_JM because the response was compressed by the ISO-8859-1 method, which is not supported by ISA Server. As a result, the response was discarded. This happens when the server ignores the request from ISA Server for GZIP compression and instead compresses the response with ISO-8859-1.

What is ISO-8859-1 method ??? How can we turn the ISA Server compatible with it ???

Good luck for us !

bedpan, look this...
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/isasdk/isa/fpcwebpublishingproperties_sendacceptencodingheader.asp

It's about how configure ISA Server to accept encoded headers.

And this...

http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/sp2.mspx#HTTPCompression

It's about a new SP2 feature that filter compressed headers !

Some web sites that have been blocked now are ok, after i disable the Compression Filter !

_____________________________

Ricardo Saddi Becker
MCSA
Becker Consultoria
Cuiab� - Mato Grosso - Brazil

(in reply to bedpan)

Post #: 15

RE: Getting 502 proxy error after upgrading to SP2 - 13.Feb.2006 3:30:50 PM

BHarrison

Posts: 1
Joined: 13.Feb.2006
Status: offline

We have the same issue. I've followed all of the links posted and found that only delta.com is affected. Delta.com is why I'm looking for a solution. Our company uses delta.com nearly everyday. So I know that this is a direct result of sp2. delta.com worked on friday, sp2 applied saturday, delta.com not working on monday. I've read the documents and post but still do not see a clear solution and tests on the ideas presented still do not deliver delta.com. Any ideas or developments.

(in reply to ricardobecker)

Post #: 16

RE: Getting 502 proxy error after upgrading to SP2 - 13.Feb.2006 4:43:09 PM

ClintD

Posts: 1833
Joined: 26.Jan.2001
From: Keller, TX
Status: offline

I have a support contract with MSFT and asked them about this "The HTTP request includes a non-supported header" issue. It's a known bug in ISA SP2 and there is no known workaround, other than uninstalling SP2. There isn't a MSKB article about it yet or a bug number that they could provide - sorry for the lack of detail.

I'm only commenting on the 'non-supported header' problem - the other issues are probably not related to the issue I talked to our MS rep about.

< Message edited by ClintD -- 13.Feb.2006 4:45:25 PM >

(in reply to BHarrison)

Post #: 17

RE: Getting 502 proxy error after upgrading to SP2 - 13.Feb.2006 6:08:42 PM

Jason Jones

Posts: 2154
Joined: 30.Jul.2002
From: United Kingdom
Status: offline

Thanks for the heads-up Clint - haven't seen this issue in the wild yet

_____________________________

Jason Jones (MVP)

Silversands Limited http://www.silversands.co.uk
My Blog: http://blog.msfirewall.org.uk/

Get our NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ClintD)

Post #: 18

RE: Getting 502 proxy error after upgrading to SP2 - 13.Feb.2006 9:07:35 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hey guys,

quote:

-----Original Message-----
From: Jim Harrison [mailto:Jim@isatools.org]
Sent: maandag 13 februari 2006 20:51
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2004 SP2 Http Filter
http://www.ISAserver.org

Ok - if you or your customers / family / friends / pets / household gadgets have installed ISA Server 2004 SP2 and are experiencing this "502 http filter blocked" response for sites that work without SP2, please call PSS and provide:
- ISAInfo (http://isatools.org/isainfo/isainfo.zip)
- network captures at the ISA external interface
We're trying to assess the scope of the problem and we can't do that without hard data.
-------------------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/

http://isatools.org

Read the help / books / articles!
-------------------------------------------------------

HTH,
Stefaan

(in reply to Jason Jones)

Post #: 19

RE: Getting 502 proxy error after upgrading to SP2 - 15.Feb.2006 4:54:06 PM

glanrock

Posts: 1
Joined: 15.Feb.2006
Status: offline

New to the forums!

We installed the SP2 and now receive this same error for at least two sites, delta.com and neucoinc.com when users attempt to use them. I have been reading through the posts here and we have just implemented the cache-disable from above. Will post results when we continue testing.

Any other advice would be appreciated.

Thanks!

John

(in reply to spouseele)

Post #: 20