From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 29239 invoked by alias); 28 Jun 2017 05:34:06 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 29224 invoked by uid 89); 28 Jun 2017 05:34:04 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-4.1 required=5.0 tests=AWL,BAYES_00,EXECUTABLE_URI,GIT_PATCH_2,KAM_EXEURI,KAM_LAZY_DOMAIN_SECURITY,RCVD_IN_DNSWL_LOW autolearn=ham version=3.3.2 spammy=negotiation, appliance, age, states X-HELO: smtp-out-so.shaw.ca Received: from smtp-out-so.shaw.ca (HELO smtp-out-so.shaw.ca) (64.59.136.139) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Wed, 28 Jun 2017 05:34:02 +0000 Received: from [192.168.1.100] ([24.64.240.204]) by shaw.ca with SMTP id Q5bzd9b72eQWUQ5c0dg5AN; Tue, 27 Jun 2017 23:34:01 -0600 X-Authority-Analysis: v=2.2 cv=UpATD64B c=1 sm=1 tr=0 a=MVEHjbUiAHxQW0jfcDq5EA==:117 a=MVEHjbUiAHxQW0jfcDq5EA==:17 a=IkcTkHD0fZMA:10 a=w_pzkKWiAAAA:8 a=RYGGx9rUFB8euhDJSoUA:9 a=LIRPmTOcE0N9rGmf:21 a=mWRy_8K-7P8-M2NU:21 a=QEXdDO2ut3YA:10 a=sRI3_1zDfAgwuvI8zelB:22 Reply-To: Brian.Inglis@SystematicSw.ab.ca Subject: Re: Updated: setup (2.880) To: cygwin@cygwin.com References: From: Brian Inglis Message-ID: <5370dce1-012a-1442-86c0-28a9232a1486@SystematicSw.ab.ca> Date: Wed, 28 Jun 2017 05:34:00 -0000 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.2.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-CMAE-Envelope: MS4wfLXwZ2ddhZYzwyGbxKp9JLJ9oDN+6tOR+sAy0zLxX/wXXkEcNYIJw3FdKu60H5h0pCqWfEKaeQY70qrIhMh7cf2jJRmONoEK1moVDkr7hap53KXHGPQB k81XaF9fwx3MftVpXyvSeyEPDeTEaYbUitDaOF1jZE2G3nXkYEfO/bkozNV3v81tLU6VwTTZ35Glvg== X-IsSubscribed: yes X-SW-Source: 2017-06/txt/msg00378.txt.bz2 On 2017-06-27 14:55, Nellis, Kenneth wrote: > From: Csaba Raduly >> I also couldn't reproduce your scenario. >> ... >> Since it's reproducible for you, you could (if you're curious) run >> wget with the -d (--debug) switch or break out the heavy artillery: >> install Wireshark and look at the HTTP headers sent and received by >> wget. > Thanx, Csaba, for your interest. Another test with -d is easy enough, > so here it is: > $ wget -d -O setup-x86_64.exe http://cygwin.com/setup-x86_64.exe ... > ---request begin--- > GET /setup-x86_64.exe HTTP/1.1 > User-Agent: Wget/1.19.1 (cygwin) > Accept: */* > Accept-Encoding: identity > Host: cygwin.com > Connection: Keep-Alive > ---request end--- > HTTP request sent, awaiting response... > ---response begin--- > HTTP/1.1 200 OK > Server: Apache > ETag: "16b1f9e-dd613-55161a558184f" > Accept-Ranges: bytes > Cache-Control: max-age=0 > Expires: Tue, 27 Jun 2017 20:40:06 GMT > Vary: Accept-Encoding > Content-Encoding: gzip > Content-Security-Policy: default-src 'self' http: https: > Keep-Alive: timeout=30, max=20 > Content-Length: 877562 > Content-Type: application/octet-stream > Last-Modified: Wed, 07 Jun 2017 16:58:31 GMT > Date: Tue, 27 Jun 2017 20:39:27 GMT > Age: 0 > Via: 1.1 ironport.tms.local:80 (Cisco-WSA/10.1.0-204) > Connection: keep-alive > ---response end--- ... > $ file *.exe > setup-x86_64.exe: gzip compressed data, from Unix > $ > Note the response from the Apache server: >> Content-Encoding: gzip > Not sure why it would do that. Maybe my wget could be more specific. > But my updated script (per advice from others) is working fine. Try: $ rm -f setup-x86_64.exe $ wget -d -N -nv --no-cache --no-http-keep-alive --no-proxy \ https://cygwin.com/setup-x86_64.exe and see if it can bypass the effects of the appliance, or get it to respond as requested, but it may download and cache gzipped content that pass its scans, and serve them as is, ignoring client content negotiation. Not encouraging when a security product web site states in its Features [emphasis added]: "*When* compromise occurs, quickly determine the scope of the damage, remediate it, and bring operations back to normal." -- Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple