HTTP Anti-Virus Proxy

On Internet Explorer im getting the following page when a virus is detected where I should actually be getting HAVP's block page:

You are not authorized to view this page
You might not have permission to view this directory or page using the credentials you supplied.

--------------------------------------------------------------------------------

If you believe you should be able to view this directory or page, please try to contact the Web site by using any e-mail address or phone number that may be listed on the www.thefuturesperfect.com home page.

You can click Search to look for information on the Internet.




HTTP Error 403 - Forbidden
Internet Explorer



In firefox it works fine! Any ideas?

This only happens on one of my servers with HAVP installed, not on both.

I don't think you are receiving any virus if you get 403 message from the web server itself.. are you sure you are trying same address with both browsers and HAVP shows Virus with firefox?

Cheers,
Henrik

Yep, am testing all of the Eicar test file, cleared cache for both tests.

very strange.

Can you try to disable "Show friendly HTTP error messages" from IE Internet Options / Advanced? Maybe your IE version doesn't want to show the HAVP error page because of that. Though it works on all IE that I tested anyway.

Cheers,
Henrik

I can, however when I use my local proxy running HAVP, I get HAVP's error messages. When I use my other proxy running HAVP, I get the IE page.

Very strange

Maybe the website has some limitations on IP or something, so the other proxy is always forbidden?

Cheers,
Henrik

Have made a copy of the eicar test files on my own webspace, still getting the IE error.

Maybe it just doesn't go through HAVP then.. What's the error when you remove friendly messages?

Disabling it gives me my havp error page,

Im not the only person using the proxy getting this problem, it's really strange that it does not happen on the proxy server on my lan!

Ah ok that clears it up a bit. What software are the proxies? I assume both are configured Client->Proxy->HAVP? The other proxy probably removes the HAVP error page body from 403 response..

Client -> Squid -> HAVP -> Squid -> Website

Same setup on both servers, same versions, same config, only difference is hardware and OS. LAN server is Debain Sarge, Remote server is Fedora Core 3.

Works fine on both servers in FFox. Works fine in IE on LAN. Does not work with IE on remote server.

Well not remove the body but it must do something to it so IE doesn't show it with friendly errors on..

What IE version are you using?

IE6.0.2900.2180.xpsp_sp2_gdr.050301-1519

Latest and greatest..

I'll do some testing if I can find the reason.. can you tell me Squid version too?