Great Circle Associates Firewalls
(August 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: http user_agent blocking
From: tom @ hughes . com (Tom Nakamura)
Date: Tue, 29 Jul 1997 17:43:53 -0700
To: firewalls @ greatcircle . com

Encountered a problem with the my.yahoo.com website due to http user_agent
blocking at the firewall.  Seems that my.yahoo.com checks user_agent to
qualify a browser as cookies and tables capable.  If it doesn't receive a
correct "user_agent" it gives you a web page saying my-yahoo requires
cookies.  If you send a correct user_agent you can subscribe to my-yahoo.
Once subscribed the site does not check user_agent since you are then
sending the proper cookies.  Have queried Yahoo for clarification but no
response to date.

Seeking some comments on:

1) pros and cons of blocking transmittal of user_agent
   (user_agent provides type of browser, version and platform)
2) how widespread user_agent may be used to deny website services
3) any workarounds people may have found

Tom Nakamura
tom @
 hughes .
 com




Indexed By Date Previous: Re: CheckPoint FireWall-1
From: Hassan Karim <hkarim @ cq . com>
Next: A few more security related URLS's
From: <kgibbs @ best . com>
Indexed By Thread Previous: Re: CheckPoint FireWall-1
From: Hassan Karim <hkarim @ cq . com>
Next: A few more security related URLS's
From: <kgibbs @ best . com>

Google
 
Search Internet Search www.greatcircle.com