« previous next »
Pages: [1]   Go Down

Author Topic: HTTP Methods RPC_IN_DATA and RPC_OUT_DATA  (Read 4609 times)

Offline jmelika

  • Administrator
  • Hero Member
  • *****
  • Posts: 339
  • Karma: 7
HTTP Methods RPC_IN_DATA and RPC_OUT_DATA
« on: July 04, 2008, 09:48:51 AM »
NetScaler v 7 build 51.

I was trying to setup a policy on my network to drop all HTTP requests that are neither GET nor POST.  That was easy.  I ran into a problem since my Exchange environment required HTTP Methods RPC_IN_DATA and RPC_OUT_DATA for Outlook Anywhere (formerly known as RPC over HTTP/S).  When I tried to add those impressions to the policy to permit them as well, I get invalid policy rule error.  It looks like the NetScaler is hardcoded with what methods there are, and those two ones are missing.

JM
Logged

Offline TheOracle

  • Hero Member
  • *****
  • Posts: 152
  • Karma: 18
Re: HTTP Methods RPC_IN_DATA and RPC_OUT_DATA
« Reply #1 on: July 08, 2008, 08:59:49 AM »
What feature were you using to do this, CF?  If so, try using responder to do this, as you can drop requests with it as well.

The Oracle
Logged

Offline jmelika

  • Administrator
  • Hero Member
  • *****
  • Posts: 339
  • Karma: 7
Re: HTTP Methods RPC_IN_DATA and RPC_OUT_DATA
« Reply #2 on: July 08, 2008, 11:52:20 AM »
I am using Protection Features/Filter.  How come I don't have responder as an option?  Is is in 8.0+?

JM
Logged

Offline danm

  • Sr. Member
  • **
  • Posts: 17
  • Karma: 2
Re: HTTP Methods RPC_IN_DATA and RPC_OUT_DATA
« Reply #3 on: July 11, 2008, 09:35:42 AM »
Quote from: jmelika on July 08, 2008, 11:52:20 AM
I am using Protection Features/Filter.  How come I don't have responder as an option?  Is is in 8.0+?

JM

Yes.  It's 8.0+ and you have to enable it.

>enable ns feature RESPONDER


> show ns feature
        Feature status:

                             Responder: ON
                     
 Done



Logged

Offline jmelika

  • Administrator
  • Hero Member
  • *****
  • Posts: 339
  • Karma: 7
Re: HTTP Methods RPC_IN_DATA and RPC_OUT_DATA
« Reply #4 on: July 11, 2008, 09:49:07 AM »
bummer.  I can't upgrade to v8 yet.

The bug still remains though in v7.  Can someone attempt it in v8 for me please and report the results?

Thanks!
JM
Logged

Offline TheOracle

  • Hero Member
  • *****
  • Posts: 152
  • Karma: 18
Re: HTTP Methods RPC_IN_DATA and RPC_OUT_DATA
« Reply #5 on: July 13, 2008, 10:13:50 AM »
I thought that at one point it had required a "well known" method to be configured, but had been removed as a requirement.  Now it may be a limit on the size of the method, as it may be assuming that the method string is shorter than a given value.  If so, try using something like XYZ and if it works, then this is the issue.

The Oracle
Logged

Offline jmelika

  • Administrator
  • Hero Member
  • *****
  • Posts: 339
  • Karma: 7
Re: HTTP Methods RPC_IN_DATA and RPC_OUT_DATA
« Reply #6 on: July 14, 2008, 10:06:37 AM »
Oracle, I just tried REQ.HTTP.METHOD != XYZ and I still received the Invalid Rule error.  I think it has to do with preset rules.
Logged

Offline TheOracle

  • Hero Member
  • *****
  • Posts: 152
  • Karma: 18
Re: HTTP Methods RPC_IN_DATA and RPC_OUT_DATA
« Reply #7 on: July 28, 2008, 07:26:19 AM »
Try this:

add rewrite policy drop_invalid_method "!(HTTP.REQ.METHOD.EQ(\"GET\")||HTTP.REQ.METHOD.EQ(\"POST\")||HTTP.REQ.METHOD.EQ(\"RPC_IN_DATA\")||HTTP.REQ.METHOD.EQ(\"RCP_OUT_DATA\"))" RESET

This bound as a request policy should do the job as well.

The Oracle
Logged
Pages: [1]   Go Up
« previous next »