Hi,

We recently upgraded to BM3.8 from BM3.7 by creating a new temporary BM3.8
server then upgrading the old one. When installing the temporary server I
recreated all the access rules. We've now moved back to the original server,
upgraded to BM3.8. These are NW6.5 SP3 servers running Surfcontrol.

There's a niggling problem with a particular site I can't resolve. Users who
used to be able to access https://paymentservices.bacs.co.uk are getting a
"403 forbidden" error now we're back to the original upgraded server, but
didn't get this when we were on BM3.7 and still don't when I switch them
back to the temporary server (which is still up).
This "403 forbidden" error screen is slightly different to the usual one. If
I try to access a forbidden site like playboy.com we get:

**********************
HTTP Error [in grey box]

Status: 403 forbidden

Description: Organizational policies prohibit access to this page.

Note: If necessary, please contact your Systems Administrator for
resolution.

[Thin grey horizontal line]
[Small letters] This page is generated by Bordermanager Proxy........
[Novell icon, "Powered by Novell"]
*********************


However, when I try the https://paymentservices.bacs.co.uk site, we get:


**********************
HTTP Error [in grey box]

Status: 403 forbidden

Description: Organizational policies prohibit access to this page.

*********************

....and that's it. To make matters more complicated, this reduced forbidden
message doesn't correspond with a 'Deny' log entry in the BM access control
logs. There are entries created in the general activity log, saying this:

"10.XX.XX.XX - USER1.DEPT.OURTREE [14/Jul/2005:08:53:01 +0100] "CONNECT
paymentservices.bacs.co.uk:443 HTTP/1.0" 403 1727"


Any ideas on what's going on here?



Thanks,



Steve Law