hi ppl i just discover a bug in Microsoft Internet Security and Acceleration (ISA) Server which make you able to Bybass HTTP ( extension files ) just add # to the end of the file extension=0D
ex: www.site.com/file.zip#=0D 
that will make you bybass the filter rule if the admin prevent you from downlaoding the extension zip=0D
Copyright MedoZero 2006