Author Topic: XML commands blocked by WEBshield (Avast 7)  (Read 1611 times)

0 Members and 1 Guest are viewing this topic.

vincentdedieu

  • Guest
XML commands blocked by WEBshield (Avast 7)
« on: June 25, 2012, 02:12:22 PM »
Hello

Axel is a thin client manufacturer (www.axel.com) and a remote administation tool (AxRM) is available with our products.
Some of our customers complain AxRM doesn't work when the Free Avast WEBshield is enabled.

XML language is used for most the commands issued by AxRM. After investigations, we noticed a AxRM XML command is blocked by the WEBshield when issued in chunked mode.

For example such a command is correctly parsed by WEBshield:

POST /scripts/axadmin.cgi HTTP/1.1
Content-type: text/xml
Host: 192.168.1.12
Content-length: 2654

<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE AxelAdmin SYSTEM "axadmin.dtd">
<AxelAdmin>
../..
</AxelAdmin>


But this one is blocked (on the network the data flow is stopped after the keyword 'chunked' :

POST /scripts/axadmin.cgi HTTP/1.1
Content-type: text/xml
Host: 192.168.1.12
Transfer-Coding: chunked

1000
<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE AxelAdmin SYSTEM "axadmin.dtd">
<AxelAdmin>

../..

</AxelAdmin>

0


The AVAST version is up-to-date (V7.0.1426).
If needed, network traces (with Wireshark) are available.

Currently the only way to allow AxRM working is disabling the WEBshield.

I checked this forum andimilar problem had been reported. But no solution.

Could you let me know if a solution exists?

Regards

  Vincent