You could try:-

Re-enable the worm catcher

Create a new http service and call it http_none, in advanced for this service
change protocol type to none

Creating a new rule onnly for this connection ie internal -> appliaction site ->
http_none

All other http traffic must be matched on another rule so you still have the
smartdefense functionality

It is a workaround but give it a go

JP




Quoting "Luna, Cesar" <[EMAIL PROTECTED]>:

> Hello,
>
> I am seeing the following error message in the log viewer when internal
> users are trying to access an application on the internet:
>
> message_info: Illegal LF-CR combination in  http header
>
> NG R55 hfa_17
>
> Solution ID: #sk31267 - This article talks about the problem being after
> upgrading to hfa_16.  Firewalls are running
> hfa_17.  2nd option is to disable 'http worm catcher'
>
> We disabled the worm catcher and that resolved the problem.
>
> Is there anything else that we can do besides disabling the worm
> catcher?
>
> Thanks,
>
> Cesar Luna
> PerotSystems
> 2300 W. Plano Parkway
> Phone: 972-577-6557
>
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to