Is Yahoo Web Mail flawed?

Hi,

I came upon a problem in which users log onto http://mail.yahoo.com and
supply their credentials without problems. The user is transfers to his
mail control panel but upon clicking any of the hyperlinks, the browser
returns "Cannot find server or DNS Error".

After further investigation the problem seems to be CheckPoint FW-1
blocking the link. The reason reported in the log is "Attack Info: HTTP
Header too long".

Can anyone shed some light on the matter?

Thank You

Re: Is Yahoo Web Mail flawed?

"acb" wrote in message
news:1131645358.309665.47830@z14g2000cwz.googlegroups.com

> I came upon a problem in which users log onto http://mail.yahoo.com
> and supply their credentials without problems. The user is transfers
> to his mail control panel but upon clicking any of the hyperlinks,
> the browser returns "Cannot find server or DNS Error".
>
> After further investigation the problem seems to be CheckPoint FW-1
> blocking the link. The reason reported in the log is "Attack Info:
> HTTP Header too long".
>
> Can anyone shed some light on the matter?

Using lynx to access the site results in several URLs delivering a "BAD
HTML!! ..." at the bottom of the terminal screen, so the CheckPoint software
may be configured to block a URL if a header contained within is longer than
some programmed maximum length, presumably a vestige of the days when a
buffer overflow was a possibility.

You should probably ask for Support to help you understand what that length
is, and how to change the configuration.

Re: Is Yahoo Web Mail flawed?

This is a MIME GnuPG-signed message. If you see this text, it means that
your E-mail or Usenet software does not support MIME signed messages.
The Internet standard for MIME PGP messages, RFC 2015, was published in 1996.
To open this message correctly you will need to install E-mail or Usenet
software that supports modern Internet standards.

--=_mimegpg-commodore.email-scan.com-6430-1131666231-0008
Content-Type: text/plain; format=flowed; charset="US-ASCII"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

acb writes:

> Hi,
>
> I came upon a problem in which users log onto http://mail.yahoo.com and
> supply their credentials without problems. The user is transfers to his
> mail control panel but upon clicking any of the hyperlinks, the browser
> returns "Cannot find server or DNS Error".
>
> After further investigation the problem seems to be CheckPoint FW-1
> blocking the link. The reason reported in the log is "Attack Info: HTTP
> Header too long".
>
> Can anyone shed some light on the matter?

There's nothing wrong with Yahoo webmail (at least as far as this issue is
concerned).

But there's everything wrong with the buggy software that you're running. By
that, I do not necessarily mean just the Checkpoint shitware. You are using
a technically defective operating system whose main purpose is to serve as
an efficient vector for virus and spam distribution. And, in order to fix
that, you must install sloppily-written security software, like Checkpoint,
that might cover up some of the problems, but add bugs of its own.



--=_mimegpg-commodore.email-scan.com-6430-1131666231-0008
Content-Type: application/pgp-signature
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.7 (GNU/Linux)

iD8DBQBDc9s3x9p3GYHlUOIRAqR+AJ9SsqGZlA1/lR2CrSN/OYQ+uASzWACf YeEy
srxNdZMrzT6xw0vdK2jWicc=
=XADE
-----END PGP SIGNATURE-----

--=_mimegpg-commodore.email-scan.com-6430-1131666231-0008--

Re: Is Yahoo Web Mail flawed?

Actually the so called Checkpoint shitware is available on multiple
platforms. I will not be bothered to further on your non-sensical
thread, though feel free to fire along :-)

Long life and prosper.

Re: Is Yahoo Web Mail flawed?

Thanks for the info. I'll follow in this lead.

Re: Is Yahoo Web Mail flawed?

This is a MIME GnuPG-signed message. If you see this text, it means that
your E-mail or Usenet software does not support MIME signed messages.
The Internet standard for MIME PGP messages, RFC 2015, was published in 1996.
To open this message correctly you will need to install E-mail or Usenet
software that supports modern Internet standards.

--=_mimegpg-commodore.email-scan.com-17799-1131754511-0004
Content-Type: text/plain; format=flowed; charset="UTF-8"
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
X-Mime-Autoconverted: from 8bit to quoted-printable by mimegpg

acb writes:

> Actually the so called Checkpoint shitware is available on multiple
> platforms. I will not be bothered to further on your non-sensical
> thread, though feel free to fire along :-)
>
> Long life and prosper.

Can't you get anything right? Sheesh.

It should be â€=9CLive long, and prosper.â€=9D


May a thousand tribbles mistake you for a hundred year-old Klingon.



--=_mimegpg-commodore.email-scan.com-17799-1131754511-0004
Content-Type: application/pgp-signature
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.7 (GNU/Linux)

iD8DBQBDdTQPx9p3GYHlUOIRAmIyAJ9KBHy4LQf5oI9sqQ5uP4oUi0AcpACe LvTC
UtJOURxyIyRQJDIQGjMh0vY=
=vXP2
-----END PGP SIGNATURE-----

--=_mimegpg-commodore.email-scan.com-17799-1131754511-0004--

Re: Is Yahoo Web Mail flawed?

Got get yourself a life you sad sad thing.

FYI Checkpoint is running on top of Linux. And the problem has nothing
to do with the underlying OS.

What does the underlying OS have to do? Checkpoint (running on top of
Linux); ***it*** is blocking the packet; not the browser, nor the
Windows client OS. Have a look at the answer by ynotssor; ***that*** is
an answer.

Again, Long life and prosper.

Re: Is Yahoo Web Mail flawed?

This is a MIME GnuPG-signed message. If you see this text, it means that
your E-mail or Usenet software does not support MIME signed messages.
The Internet standard for MIME PGP messages, RFC 2015, was published in 1996.
To open this message correctly you will need to install E-mail or Usenet
software that supports modern Internet standards.

--=_mimegpg-commodore.email-scan.com-22900-1131802243-0003
Content-Type: text/plain; format=flowed; charset="US-ASCII"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

acb writes:

> Got get yourself a life you sad sad thing.

Who are you talking to, Einstein? Perhaps it's too much for you to
understand, but when you respond to a public message, like I'm doing now,
it's customary to quote the parts of the previous message you're responding
to, so that everyone else will have some kind of an idea what the fuck
you're babbling about.

> FYI Checkpoint is running on top of Linux. And the problem has nothing
> to do with the underlying OS.

Indeed. The problem seems to exist between the chair, and the keyboard.

> What does the underlying OS have to do?

Take Operating Systems 101. Then, you'll know.

> Checkpoint (running on top of
> Linux); ***it*** is blocking the packet;

How _DARE_ it block packets? Where does it get those crazy ideas!

> not the browser, nor the
> Windows client OS. Have a look at the answer by ynotssor; ***that*** is
> an answer.

What answer, Einstein? I don't see any answers around here.

> Again, Long life and prosper.

May the schwartz be with you.



--=_mimegpg-commodore.email-scan.com-22900-1131802243-0003
Content-Type: application/pgp-signature
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.7 (GNU/Linux)

iD8DBQBDde6Dx9p3GYHlUOIRAiIQAJ49J0vwIcSeIBR1Q6uR+eyh70h1SwCe PTMA
mbov0JKSfP8v8TwBtdEEWG8=
=YVao
-----END PGP SIGNATURE-----

--=_mimegpg-commodore.email-scan.com-22900-1131802243-0003--