PDA

View Full Version : YU, YUMEX, etc get blocked by our network - how to change to FTP access?


Archw
2006-03-26, 08:34 AM CST
Let me start by saying I am a newbie and don't now much about Linux.

I have a Fedora FC 5 machine that sits behind an ISA Server (2004). When I fire up YUM , YUMEX, software updater, etc, they all die at a certain point. I pulled up the records from the ISA proxy server log and you can see where it gets a failure. At first I figured it was the way the Linux machine was doing something but I tried putting the sites that fail directly into an XP machine's browser bar and they fail there too. If I go to a machine that does not go through ISA (my laptop at home) it goes straight through. The sites that fails are these:

http://212.219.56.131/sites/download.fedora.redhat.com/pub/fedora/linux/extras/4/i386/repodata/primary.xml.gz
http://download.fedora.redhat.com/pub/fedora/linux/extras/5/i386/repodata/primary.xml.gz

In both cases, the ISA log records this:

192.168.1.7 anonymous urlgrabber/2.9.8 N 2006-03-26 05:45:56 w3proxy ISACOMP - download.fedora.redhat.com 209.132.176.220 80 344 171 4213 http TCP GET http://download.fedora.redhat.com/pub/fedora/linux/extras/5/i386/repodata/primary.xml.gz - Inet 2147500033 0x0 ISA12: Access to Internet & Allow rule - Internal External 0x0 Failed

If you go to either site direct from an XP's browser, you get this error:


The page cannot be displayed

Explanation: There is a problem with the page you are trying to reach and it cannot be displayed.
Technical Information (for support personnel)

Error Code: 500 Internal Server Error. Not implemented (-2147467263)

I have found two more weird things:

I can go to: http://download.fedora.redhat.com/pub/fedora/linux/extras/5/i386/repodata

but I can't go to:

http://download.fedora.redhat.com/pub/fedora/linux/extras/5/i386/repodata/primary.xml.gz

however, if not on our network, I can flip over to my laptop (not on our network) and it goes right to the site. Thus, in my opinion (for whatever that's worth), it has nothing to do with Linux, Fedora, YUM, YUMEX, etc....its got something to do with our proxy server not liking something I can't figure out.

I started ISA logging on the server and can watch the two hit the site. They go to the same IP address but the longer one dies. I can't see where I am blocking it but, who knows.

With all that said, I have googled for hours trying to figure it out and it sounds like it is a known issue and not much to do about it. In each case, I read "Set it up for FTP access" but no one ever says specifically how to do it. Any directions someone can give me would be appreciated!

Thanks!

Arch

Archw
2006-03-26, 09:49 AM CST
Update on that last posting. Turns out there is some kind of bug in SP2 of ISA2004 that prevents you from downloading gz files and you have to:

1. disable "Compression Filter"
2. disable "Caching Compressed Content Filter"

Once I did that, it worked like a charm - YUMEX is downloading away!

Arch