Firewall log entry

[jwillard]

I keep receiving a firewall log messsage that looks like this:

*.*.*.* 12.158.80.10:80/Class3CodesSigning2001.crl response denied: unsafe content type "application/pkix-crl"

I see that the IP leads to Verisign but I'm not sure why certain computers are trying to contact them and download this file.

Any help or hints would be greatly appreciated.

No Guts No Glory. So I try and try again...

 

[jwillard]

I hope this was a good forum to post this in. If not I apolagize.

No Guts No Glory. So I try and try again...

 

[pscad]

Looks like it's going over port 80, so it may be from someone browsing to a site that is using a security cert from Verisign. When you access a secure site, it contacts the cert vendor to verify the integrity of the cert.

Looks like your firewall is deeming it "unsafe". Have you had users complaining of not being able to access certain sites?

 

[jwillard]

No, but there are alot of sites that they are accessing but they shouldn't be accessing. If it is one of those they would not complain.

No Guts No Glory. So I try and try again...