NT4 question

PharCyde · 14th July 2001, 1:34 PM

At work, using NT4 and all the comps are networked. Problem is with internet explorer. Whenever I pull down the address bar to go to an http address is gives me this error :

Access to the resource ' http://<insert web site address here>/.html ' has been disallowed. Basically I have to remove the http:// and then press enter and it only works then. Any idea why this error occurs?

Thanks!

BBB · 15th July 2001, 11:55 AM

Do you use DNS or WINS at work?

elvis · 16th July 2001, 12:34 AM

you've got a problem server side somewhere. what's the firewall/gateway using? any caching tools like squid etc? a disallowed error sounds more like a caching or proxy issue than DNS settings.

ConundruM · 16th July 2001, 10:38 PM

does it only happen with IE ?
and are you using IP's or a DNS name ?

cause IE has issues with using IP's......alot of the time you have to hit enter a few times after typing URL or refresh n stuff....or bookmark the URL i think works
took me a while to find that out......but i dont think i was getting a disallowed error....so this probly aint your prob

Manaz · 17th July 2001, 11:55 AM

Sounds like a problem with a proxy configuration.

Let's go through a complete URL.

http://www.overclockers.com.au/index.shtml

http

The http part is the transport type - the type of connection you are requesting. Valid options are http (Hyper Text Transport Protocol), https (Secure HTTP), ftp (File Transfer Protocol), telnet (telnet or rlogin). There may be others, those are just the most common ones. If no transport type is specified, your browser will ask for http by default.

://

This is a seperator. It seperates the transport type identifier from the rest of the address. If no transport type is specified, it can be omitted.

www

This is the name of the host (computer) you are requesting data from. Some computers run multiple "virtual" hosts, which respond to requests in different ways (www to HTTP requests, ftp to FTP requests, etc). A domain owner can actually specify a default host/service to be returned should no host name be specified. Slashdot are an example of this. You can just type "slashdot.org" into Internet Explorer, IE then automatically adds the "http://" section (as I described earlier), and the DNS entry for the "slashdot.org" FQDN (Fully Qualified Domain Name) specifies that the webserver in the domain will respond in the absence of a specified hostname in the URL being requested.

.

The period acts as a seperator between the hostname and fully qualified domain name, as well as between sections of the fully qualified domain name.

overclockers.com.au

This is a Fully Qualified Domain Name (FQDN). This is checked against DNS entries in the reverse order in which it is typed, in order to find the domain on the Internet. eg in the example of overclockers.com.au, the server which maintains authority for the au top level domain (TLD) is asked "Where can I find the DNS server which has authority over the overclockers.com.au domain?" it will reply that it doesn't know, though it can tell you which DNS server controls the com.au domain space. A request is made to the DNS server with authority over the com.au domain space, and it replies with the IP of the DNS server which has authority over the overclockers.com.au domain, which is in turn asked for the IP address of the www host within the overclockers.com.au domain.

/index.shtml

Anything following a single / in a URL is a document address. It can either be served directly from the default directory of the server (index.shtml in the above example is the default document in the default directory), or it can be a specified as a document name/path relative to the default directory (/techstuff/r_km_150_256/index.shtml for instance, which is a document called index.shtml in the <default directory>/techstuff/r_km_150_256 directory on the webserver.

Now, back to the problem. It appears that your proxy server isn't interpretting the "http://" part of the URL properly, and is refusing you access to document starting with "http://", when, in fact, that section of the URL can be removed, and the document accessed anyway. This means that either your proxy administrator has most likely either unsucessfully tried to block web access, or has configured something incorrectly somewhere.

Most people I know don't actually bother typing the "http://" part of a URL anyway - it's pretty much un-needed these days (I don't think you even need to use it when asking for a web page in Lynx), so it really shouldn't cause you that much of a problem, unless you're asking for services other than regular HTTP (does ftp://mirror.aarnet.edu.au work for you for example? It may be that the misconfiguration only affects HTTP...).

PharCyde · 17th July 2001, 6:56 PM

thanks for the responses ppl.

Manaz : I believe you are on the right track when stating " This means that either your proxy administrator has most likely either unsucessfully tried to block web access, or has configured something incorrectly somewhere. "

We are allowed web access, and the problem only occured when they upgraded NT/explorer. Is there a way to reconfigure the settings myself or do I need to go to the network admin person here ?

This problem is a hassle when I do the shortcut when typing in the address bar.... ctrl+enter

also typing in ftp:// gives me the address bar error - disallowed

Cheers

14th July 2001, 1:34 PM	#1
PharCyde Member Join Date: Jul 2001 Location: Canberra Posts: 1,014	NT4 question At work, using NT4 and all the comps are networked. Problem is with internet explorer. Whenever I pull down the address bar to go to an http address is gives me this error : Access to the resource ' http://<insert web site address here>/.html ' has been disallowed. Basically I have to remove the http:// and then press enter and it only works then. Any idea why this error occurs? Thanks!

16th July 2001, 12:34 AM	#3
elvis Member Join Date: Jun 2001 Location: Brisbane Posts: 19,937	you've got a problem server side somewhere. what's the firewall/gateway using? any caching tools like squid etc? a disallowed error sounds more like a caching or proxy issue than DNS settings. __________________ Child's Play Charity

17th July 2001, 6:56 PM	#6
PharCyde Member Join Date: Jul 2001 Location: Canberra Posts: 1,014	thanks for the responses ppl. Manaz : I believe you are on the right track when stating " This means that either your proxy administrator has most likely either unsucessfully tried to block web access, or has configured something incorrectly somewhere. " We are allowed web access, and the problem only occured when they upgraded NT/explorer. Is there a way to reconfigure the settings myself or do I need to go to the network admin person here ? This problem is a hassle when I do the shortcut when typing in the address bar.... ctrl+enter also typing in ftp:// gives me the address bar error - disallowed Cheers Last edited by PharCyde; 17th July 2001 at 7:20 PM.

15th July 2001, 11:55 AM	#2
BBB Member Join Date: Jun 2001 Location: Up the road apiece... Posts: 440	Do you use DNS or WINS at work?

16th July 2001, 10:38 PM	#4
ConundruM Member Join Date: Jun 2001 Posts: 913	does it only happen with IE ? and are you using IP's or a DNS name ? cause IE has issues with using IP's......alot of the time you have to hit enter a few times after typing URL or refresh n stuff....or bookmark the URL i think works took me a while to find that out......but i dont think i was getting a disallowed error....so this probly aint your prob

17th July 2001, 11:55 AM	#5
Manaz (Damned or Belated) Join Date: Jun 2001 Location: Sydney, Australia Posts: 4,797	Sounds like a problem with a proxy configuration. Let's go through a complete URL. http://www.overclockers.com.au/index.shtml http The http part is the transport type - the type of connection you are requesting. Valid options are http (Hyper Text Transport Protocol), https (Secure HTTP), ftp (File Transfer Protocol), telnet (telnet or rlogin). There may be others, those are just the most common ones. If no transport type is specified, your browser will ask for http by default. :// This is a seperator. It seperates the transport type identifier from the rest of the address. If no transport type is specified, it can be omitted. www This is the name of the host (computer) you are requesting data from. Some computers run multiple "virtual" hosts, which respond to requests in different ways (www to HTTP requests, ftp to FTP requests, etc). A domain owner can actually specify a default host/service to be returned should no host name be specified. Slashdot are an example of this. You can just type "slashdot.org" into Internet Explorer, IE then automatically adds the "http://" section (as I described earlier), and the DNS entry for the "slashdot.org" FQDN (Fully Qualified Domain Name) specifies that the webserver in the domain will respond in the absence of a specified hostname in the URL being requested. . The period acts as a seperator between the hostname and fully qualified domain name, as well as between sections of the fully qualified domain name. overclockers.com.au This is a Fully Qualified Domain Name (FQDN). This is checked against DNS entries in the reverse order in which it is typed, in order to find the domain on the Internet. eg in the example of overclockers.com.au, the server which maintains authority for the au top level domain (TLD) is asked "Where can I find the DNS server which has authority over the overclockers.com.au domain?" it will reply that it doesn't know, though it can tell you which DNS server controls the com.au domain space. A request is made to the DNS server with authority over the com.au domain space, and it replies with the IP of the DNS server which has authority over the overclockers.com.au domain, which is in turn asked for the IP address of the www host within the overclockers.com.au domain. /index.shtml Anything following a single / in a URL is a document address. It can either be served directly from the default directory of the server (index.shtml in the above example is the default document in the default directory), or it can be a specified as a document name/path relative to the default directory (/techstuff/r_km_150_256/index.shtml for instance, which is a document called index.shtml in the <default directory>/techstuff/r_km_150_256 directory on the webserver. Now, back to the problem. It appears that your proxy server isn't interpretting the "http://" part of the URL properly, and is refusing you access to document starting with "http://", when, in fact, that section of the URL can be removed, and the document accessed anyway. This means that either your proxy administrator has most likely either unsucessfully tried to block web access, or has configured something incorrectly somewhere. Most people I know don't actually bother typing the "http://" part of a URL anyway - it's pretty much un-needed these days (I don't think you even need to use it when asking for a web page in Lynx), so it really shouldn't cause you that much of a problem, unless you're asking for services other than regular HTTP (does ftp://mirror.aarnet.edu.au work for you for example? It may be that the misconfiguration only affects HTTP...).