Re: http custom Gzip header being stripped on outbound request.



"sameer" <sameer@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:144C9A7C-9A87-4305-8EF3-E06884B3F6E6@xxxxxxxxxxxxxxxx
> Hi All,
> I am adding a custom header (Gzip header for compression) to the request
> when calling a webservice( sitting on a webserver) over the internet from
my
> application ( If interested in the details of the application , it is a
> vb.net winfom application ). The web server receives this request
recognizes
> this custom header, does what it has to do and sends back the data with
the
> custome Gzip header attached. But on some machines while the request is
sent
> from the client to the webserver, this customized header is being stripped
> before reaching the web server.
> Does any body out there know why the outbound request is being stripped
of
> this customized header and how can I make it not do this? I am guess it
might
> be something to do with on of the following
>
> The firewall,
> IE security setting,
> Antivirus
> Popup blockers
>
> Client machines are using IE6 with OS windows 2000, XP.
> Machine which is having this issue is with IE 6.0.2800.1106IC SP1 ,
windows
> 2000 SP4.
>
> Please suggest!
>

The affected machines might be running Norton/Symantec personal firewall or
Symantec Client Firewall (SCF).

Remarkably, the Norton/Symantec firewall changes HTTP headers so it can see
and analyze the response more readily. Reportedly, one change that it makes
(and there are several) is to replace "Accept-Encoding: gzip" in outbound
headers to "--------------: ---". I suppose this makes it easier for the
firewall to analyze the http response for the reason that it does not need
to uncompress a gzip'd response.

See
http://www.newestindustry.org/index.php/2005/03/10/symantec_firewall_problems_with_accept_e
for one report of this behavior. Apparently, the "Internet Security"
component of the firewall makes this change (as well as other changes), so
there's a strong possibility that a wider range of Norton/Symantec products
will exhibit this behavior.

Tell your customers to disable the firewall as a temporary test to confirm
that the firewall is the source of the problem.

Mike


.



Relevant Pages

  • RE: How to get client IP address assigned by ISP
    ... it sounds like your server is behind a firewall (or load ... so the ipaddres your are currently getting is the firewall's ... you will need to configure your firewall to pass along the ... original ipadress in a custom header. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: [Full-Disclosure] Re: Empirical data surrounding guards and firewalls.
    ... The firewall is not content filtering, thus does not stop bad requests ... connection to a webserver. ... carrying an illegal object (an illegally formed request). ...
    (Full-Disclosure)
  • Re: ADFS
    ... Found custom header: TRUE ... Passing the request through. ... Cookie domain is blank. ... TTP Index - 0 ...
    (microsoft.public.windows.server.active_directory)
  • Re: setting header in as3
    ... I cant set request headers in flash AS3. ... doesn't contain any of mine custom header. ... In order to download file from Amazon Bucket the Request Packet should ...
    (comp.unix.programmer)
  • setting header in as3
    ... I cant set request headers in flash AS3. ... doesn't contain any of mine custom header. ... In order to download file from Amazon Bucket the Request Packet should ...
    (comp.unix.programmer)

Quantcast