HTTP Anti-Virus Proxy
http://havp.hege.li/forum/

HAVP Error Pages
http://havp.hege.li/forum/viewtopic.php?f=3&t=56
Page 1 of 2

Author:  Rachel [ 26 Mar 2006 18:22 ]
Post subject:  HAVP Error Pages

On Internet Explorer im getting the following page when a virus is detected where I should actually be getting HAVP's block page:

You are not authorized to view this page
You might not have permission to view this directory or page using the credentials you supplied.

--------------------------------------------------------------------------------

If you believe you should be able to view this directory or page, please try to contact the Web site by using any e-mail address or phone number that may be listed on the www.thefuturesperfect.com home page.

You can click Search to look for information on the Internet.




HTTP Error 403 - Forbidden
Internet Explorer



In firefox it works fine! Any ideas?

This only happens on one of my servers with HAVP installed, not on both.

Author:  hege [ 26 Mar 2006 19:08 ]
Post subject: 

I don't think you are receiving any virus if you get 403 message from the web server itself.. are you sure you are trying same address with both browsers and HAVP shows Virus with firefox?

Cheers,
Henrik

Author:  Rachel [ 26 Mar 2006 19:12 ]
Post subject: 

hege wrote:
I don't think you are receiving any virus if you get 403 message from the web server itself.. are you sure you are trying same address with both browsers and HAVP shows Virus with firefox?

Cheers,
Henrik


Yep, am testing all of the Eicar test file, cleared cache for both tests.

very strange.

Author:  hege [ 26 Mar 2006 19:18 ]
Post subject: 

Can you try to disable "Show friendly HTTP error messages" from IE Internet Options / Advanced? Maybe your IE version doesn't want to show the HAVP error page because of that. Though it works on all IE that I tested anyway.

Cheers,
Henrik

Author:  Rachel [ 26 Mar 2006 19:20 ]
Post subject: 

I can, however when I use my local proxy running HAVP, I get HAVP's error messages. When I use my other proxy running HAVP, I get the IE page.

Very strange

Author:  hege [ 26 Mar 2006 19:22 ]
Post subject: 

Maybe the website has some limitations on IP or something, so the other proxy is always forbidden?

Cheers,
Henrik

Author:  Rachel [ 26 Mar 2006 19:24 ]
Post subject: 

Have made a copy of the eicar test files on my own webspace, still getting the IE error. :(

Author:  hege [ 26 Mar 2006 19:26 ]
Post subject: 

Maybe it just doesn't go through HAVP then.. What's the error when you remove friendly messages?

Author:  Rachel [ 26 Mar 2006 19:29 ]
Post subject: 

Disabling it gives me my havp error page,

Im not the only person using the proxy getting this problem, it's really strange that it does not happen on the proxy server on my lan!

Author:  hege [ 26 Mar 2006 19:32 ]
Post subject: 

Ah ok that clears it up a bit. What software are the proxies? I assume both are configured Client->Proxy->HAVP? The other proxy probably removes the HAVP error page body from 403 response..

Author:  Rachel [ 26 Mar 2006 19:34 ]
Post subject: 

hege wrote:
Ah ok that clears it up a bit. What software are the proxies? I assume both are configured Client->Proxy->HAVP? The other proxy probably removes the HAVP error page body from 403 response..



Client -> Squid -> HAVP -> Squid -> Website

Same setup on both servers, same versions, same config, only difference is hardware and OS. LAN server is Debain Sarge, Remote server is Fedora Core 3.

Works fine on both servers in FFox. Works fine in IE on LAN. Does not work with IE on remote server.

Author:  hege [ 26 Mar 2006 19:34 ]
Post subject: 

Well not remove the body but it must do something to it so IE doesn't show it with friendly errors on..

Author:  hege [ 26 Mar 2006 19:35 ]
Post subject: 

What IE version are you using?

Author:  Rachel [ 26 Mar 2006 19:36 ]
Post subject: 

hege wrote:
What IE version are you using?


IE6.0.2900.2180.xpsp_sp2_gdr.050301-1519

Author:  hege [ 26 Mar 2006 19:38 ]
Post subject: 

Rachel wrote:
hege wrote:
What IE version are you using?


IE6.0.2900.2180.xpsp_sp2_gdr.050301-1519


Latest and greatest.. :)

I'll do some testing if I can find the reason.. can you tell me Squid version too?

Page 1 of 2 All times are UTC + 2 hours [ DST ]
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/