SonicWALL block file download

  • Resolved patt

    (@artemispatt)


    7 years, 10 months ago

    Hi there,

    I’m running WordPress 4.7.1 with CM Download Manager Pro 1.7.2.

    When I tried to download a file from the document page, it sends me to ../cmdownload/get/ URL, but then I got the error message said the following:

    [Tab title: SonicWALL – Blocked by GateWay Anti-Virus Service]

    [page content]
    Gateway Anti-Virus Alert

    This request is blocked by the Firewall Gateway Anti-Virus Service. Name: File Contains VBA Macro blocked.

    I have tested on all the files including the PDF file (which shouldn’t have VBA macro), but I still receive the same error. Would you be able to provide me some clues, so I can reach out to the network admin to configure the firewall to get the page downloadable again?

    Thank you,

    • This topic was modified 7 years, 10 months ago by patt.
Viewing 4 replies - 1 through 4 (of 4 total)
  • Thread Starter patt

    (@artemispatt)

    If you could point out which part of the code in the plug-in that the form post to ../cmdownload/get URL handled, perhaps I can try to trace into the issues from my end as well.

    Thank you!

    Plugin Author CreativeMindsSolutions

    (@creativemindssolutions)

    Hi patt,
    please check function download() in lib/models/GroupDownloadPage.php file. There’s a logic that makes browser download your file.

    Best regards,
    Creative Minds

    Thread Starter patt

    (@artemispatt)

    Hi Creative Minds,

    I figured out the issue. Turned out there might be one of the files that contains VBA script in the file. Our firewall detected that and decided to block the URL /cmdownload/get and cache that block for N time duration. That cache ended up blocking all web request to /cmdownload/get even though it was for a file that doesn’t VBA macro in it.

    I’m working on getting the person who has credentials to your site to download the latest version of the plug-in to install on our WordPress site. However, I just want to double check with you on whether you still use form posting to /cmdownload/get on the Download button to obtain the document. In that case, is there any workaround do you have to avoid getting all the files blocked (e.g., add file unique id/has to the URL, so it at least only block the URL to the specific file instead of all of them)?

    Thank you,

    • This reply was modified 7 years, 10 months ago by patt.
    Plugin Author CreativeMindsSolutions

    (@creativemindssolutions)

    Hi,
    each file has its own URL for the post requests, eg. https://local.cminds.review/cmdownload/get/file/Report-2016.pdf
    It’s a rewrite-based URL so a such file file doesn’t exists in real – it calls a PHP script which checks permissions and sends the file to the browser. The last part Report-2016.pdf comes from the download’s post title. For that reason I’m not sure why your firewall blocked the whole /cmdownload/get/* part. Maybe it depends on the firewall settings.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘SonicWALL block file download’ is closed to new replies.