It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda NextGen Firewall X

PDF download in browser window does not work

  • Type: Knowledgebase
  • Date changed: 3 years ago
Solution 00005282 

This solution replies to:
- NG Firewall firmware versions 4.2.x, 5.0.x, 5.2.x
- netfence firmware versions 4.2.x


When downloading large PDF files via Internet Explorer, an error occured when the *.pdf-file was handled by the IE integrated Adobe plugin (this behavior does not occur using Mozilla Firefox).



Instead of transferring the whole file before handing over to the Adobe Reader Plugin Internet Explorer recognises the file as type "PDF" and passes the task on to the plugin. Now the Adobe Reader Plugin is invoked by the Browser - and the file gets re-assembled in an incorrect manner. Thereby the file is getting corrupted.

By manipulating - respectively removing the "Range" Header in the request and the "Content-Range" Header in the Server reply resambling of content by the Adobe Reader Plugin is avoided. The request itself is still generated two times due to Internet Explorer implementation.

The specified Headers get cut if and only if URL´s are containing a pdf extension at the end. This applies to all source addresses.

To achieve the described behavior for PDF-files only apply the following lines to "Config" > "Box" > "Virtual Servers" > "<Servername>" > "Assigned Services" > "<Servicename>" > "HTTP Proxy Settings" -> "Advanced" > "Generic squid.conf Entrie":acl PDFS urlpath_regex -i \.pdf$
header_access Range deny PDFS
header_access Content-Range deny PDFS

With firmware 4.2.5 it is possible to activate a new squid engine ("Config" > "Box" > "Virtual Servers" > "<Servername>" > "Assigned Services" > "<Servicename>" > "HTTP Proxy Settings" -> "Advanced" >  NG").

If this new engine is used, the lines above have to be replaced with the following lines to "Config" > "Box" > "Virtual Servers" > "<Servername>" > "Assigned Services" > "<Servicename>" > "HTTP Proxy Settings" -> "Advanced" > "Generic squid.conf Entrie": 

acl PDFS urlpath_regex -i \.pdf$
request_header_access Range deny PDFS
request_header_access Content-Range deny PDFS
reply_header_access Range deny PDFS
reply_header_access Content-Range deny PDFS


Link to This Page: