Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » HTTP: Non-ASCII bytes detected in HTTP request
  •  
keeper_c

Messages: 6

Karma: 0
Send a private message to this user
In security log section I have read this message : "[11/Oct/2004 10:23:04] HTTP: Non-ASCII bytes detected in HTTP request: client: (local computer IP address), server: (external IP)". I have checked local computer by antiviruses and trojan removers, try to set HTTP 1.1 and 1.0, but this message is still containing in security logs. What does mean and how I can remove it?

OS: WinXP sp1
KWF 6.0.1

local computer OS:
Win 2000

[Updated on: Mon, 11 October 2004 03:46]


Fidelis et Fortis!
  •  
feite

Messages: 523
Karma: 0
Send a private message to this user
The website the client is browsing sents a HTTP request. That request contains non-ascii character. Try the option 'DetectMaliciousHeaders' in the winrout.cfg file and set it to 0 (disable it).

If you want to check what HTTP request is send use the debug log. Right mouseclick it and select 'Messages...'. Check the HTTP related items and let the client pc access the same website again.
  •  
keeper_c

Messages: 6

Karma: 0
Send a private message to this user
I have disabled option 'DetectMaliciousHeaders' in winroute.cfg. But still have a trouble. When I clicked any weblink on in securty log section containing :
some like that:
Quote:


[13/Oct/2004 09:44:46] HTTP: Non-ASCII bytes detected in HTTP request: client: 192.168.1.5, server: 69.90.47.23
[13/Oct/2004 09:45:00] HTTP: Non-ASCII bytes detected in HTTP request: client: 192.168.1.5, server: 206.53.60.8
[13/Oct/2004 09:45:01] HTTP: Non-ASCII bytes detected in HTTP request: client: 192.168.1.5, server: 38.113.1.97


----<one weblink>----
Quote:


[13/Oct/2004 09:46:02] HTTP: Non-ASCII bytes detected in HTTP request: client: 192.168.1.5, server: 69.90.47.23
[13/Oct/2004 09:46:16] HTTP: Non-ASCII bytes detected in HTTP request: client: 192.168.1.5, server: 206.53.60.8
[13/Oct/2004 09:46:17] HTTP: Non-ASCII bytes detected in HTTP request: client: 192.168.1.5, server: 38.113.1.97


----<another weblink----
Quote:


[13/Oct/2004 09:47:17] HTTP: Non-ASCII bytes detected in HTTP request: client: 192.168.1.5, server: 69.90.47.23
[13/Oct/2004 09:47:29] HTTP: Non-ASCII bytes detected in HTTP request: client: 192.168.1.5, server: 206.53.60.8
[13/Oct/2004 09:47:30] HTTP: Non-ASCII bytes detected in HTTP request: client: 192.168.1.5, server: 38.113.1.97


---<third weblink>-----
...etc
where the client 192.168.1.5 is local machine on LAN.

Fidelis et Fortis!
  •  
feite

Messages: 523
Karma: 0
Send a private message to this user
Did you restart the KWF service?
  •  
keeper_c

Messages: 6

Karma: 0
Send a private message to this user
feite wrote on Wed, 13 October 2004 22:33

Did you restart the KWF service?


Yes, I reboot the router.

Fidelis et Fortis!
  •  
feite

Messages: 523
Karma: 0
Send a private message to this user
Did you try the debug options (debug log) I desribed?
  •  
sophos9

Messages: 107
Karma: 0
Send a private message to this user
Are you using P2P networks? Shocked
Previous Topic: Cannot see computers on other lan
Next Topic: how to prevent cloning ip and mac address to get internet acces
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Sat Nov 18 00:24:06 CET 2017

Total time taken to generate the page: 0.00491 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.