• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Content type=application/octet-stream

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> Access Policies >> Content type=application/octet-stream Page: [1]
Login
Message << Older Topic   Newer Topic >>
Content type=application/octet-stream - 19.Oct.2009 9:41:57 AM   
srjshiva

 

Posts: 28
Joined: 22.Dec.2008
Status: offline
Dear all,

Downloads are blocked in my ISA based on  compressed & restricted content.Have applied HTTP filter too.On accessing some URLs they are blocked under restricted content rule.Fine tuned the rule to find under which content they are blocked & found its blocked under Content type=application/octet-stream.The url doesn't download anything,but it redirects to another URL.

Example:On accessing the URL "http://www.hp.com/cgi-bin/sbso/exit.cgi?goto=product_exp/busproducts/computing_notebook/hp_compaq_ntbk_pc" it redirects to the below.

"http://h10010.www1.hp.com/wwpc/us/en/sm/WF04a/321957-321957-64295-321838-3955547.html?jumpid=re_R295_prodexp/busproducts/computing-notebook/hp-compaq-ntbk-pc&psn=notebooks_tablet_pcs/notebook_pcs"

Kindly assist me in resolving this issue.

_____________________________

Regards,
Shiv
Post #: 1
RE: Content type=application/octet-stream - 19.Oct.2009 12:50:29 PM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi,

check this: http://www.carbonwind.net/Forefront_TMG/File_Types/File_Types_1.htm

Regards,
Paulo Oliveira.

_____________________________

Microsoft Premier Field Engineer (PFE)
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to srjshiva)
Post #: 2
RE: Content type=application/octet-stream - 19.Oct.2009 11:53:01 PM   
srjshiva

 

Posts: 28
Joined: 22.Dec.2008
Status: offline
Thank Paulo

Will check & get back

_____________________________

Regards,
Shiv

(in reply to paulo.oliveira)
Post #: 3
RE: Content type=application/octet-stream - 20.Oct.2009 4:14:07 PM   
adimcev

 

Posts: 380
Joined: 19.Oct.2008
Status: offline
When I follow your first link, and capture with Wireshark the traffic, on my side, there is a single response with 'Content-Type: application/octet-stream':

GET /img/favicon.ico HTTP/1.1
Host: welcome.hp-ww.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/3.0.195.27 Safari/532.0
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Cache-Control: max-age=7200
Date: Tue, 20 Oct 2009 19:55:03 GMT
Content-Length: 766
Content-Type: application/octet-stream
ETag: "37a8cbaac5c00"
Expires: Tue, 20 Oct 2009 21:54:19 GMT
Accept-Ranges: bytes
Server: Apache
Connection: keep-alive

Data(hex):

'0000010001002020100001000400e802000016000000280000002000000040000000010004000000000080020000000000000000000010000000000000000000000000008000008000000080800080000000800080008080000080808000c0c0c0000000ff0000ff000000ffff00ff000000ff00ff00ffff0000ffffff00ffffffffffffffffffffffffffffffff888888888888888ff8888888888888886664466646784678744664444644664644444444447f6448764444444444444444444444478f84478888764444444444444444478ffff4468ffff8744444444444444478fffff7447ffffff844444444444447fffffff84478ffffff8644444444447ffffffff86448fffffff844444444468fff8fffff74478888ffff7444444447f877887778744476778fff8644444468f8447874478644444478fff74444447fff746874478744784468fff84444447fff7447844487446874478fff6444448fff8446874488744884468fff7444448ffff744884478744786648fff7444448ffff8447864488446874478ff7444448ffff8646874478744886478ff7444447fffff744884468844786447f86444447f8fff844774448844486447f8444444688fff86446447ff74444448f7444444478ffff7446888ff8888888f84444444468ffff8447fffffffffffff744444444478ffff6448fffffffffff744444444444788ff7447fffffffff87444444444444478ff84478ffffff88744444444444444478f86468ffff8876444444444444444444787447f87776444444444444444444444784478744444444444444466676777777f777f8777777777777777ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000'

The start "00 00 01 00" may indicate a .ico file.
Which it is(you can see this if you export the data bytes from Wireshark), a HP ico.

Thanks,
Adrian

_____________________________

Blog: http://www.carbonwind.net/blog

Get Our ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to srjshiva)
Post #: 4
RE: Content type=application/octet-stream - 22.Oct.2009 8:34:08 AM   
srjshiva

 

Posts: 28
Joined: 22.Dec.2008
Status: offline
Thanks Adrian,


Will check & revert

_____________________________

Regards,
Shiv

(in reply to adimcev)
Post #: 5

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> Access Policies >> Content type=application/octet-stream Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts