Re: Why is IPS blocking some clients


kingthorin@xxxxxxxxx wrote:
Just as a test try removing the enctype="multipart/form-data" tag.

I tried a couple of variations of the form tag:

Original enctype="multipart/form-data"
www.sygration.com/cgi-bin/banana64

No enctype attribute
www.sygration.com/cgi-bin/banana65

Original enctype=application/x-www-form-urlencoded"
www.sygration.com/cgi-bin/banana66

Please try these.

The last two worked with one customer, but only because this format
seems to pack the POST data much more efficiently when sent back to the
server that way. I discovered earlier that that customer's site was
allowing POST data through if the response was contained in one packet
(content-length < 1500 bytes). The original multipart/form-data
version required multiple packets for the same POST data, so the
customer's IPS stopped it.

I tried the no-enctype, and enctype=application/x-www-form-urlencoded"
on a form with data that required multiple packets (content-length >
1500) and the same failure occured.

Tom

.