Apologies for the long post but it takes a little explaining...
I have what I believe to be a weird http proxy authentication problem. Our
McAfee product (Protection Pilot) automatically downloads virus signature
updates to a central repository on a Windows XP Pro computer. This has been
working for months without problem, but started failing yesterday.

From the log examples following, you can see that it successfully downloads
all files until it hits the first of several ".upd" files which give a 403
=========== - mcfeeupd.coct [03/Sep/2005:13:01:06 +1000] "GET
http://update.nai.com/Products/CommonUpdater/catalog.z HTTP/1.0" 200 2124 - mcfeeupd.coct [03/Sep/2005:13:01:07 +1000] "GET
kgCatalog.z HTTP/1.0" 200 2340 - mcfeeupd.coct [03/Sep/2005:13:01:09 +1000] "GET
ATInstall.mcs HTTP/1.0" 200 42711 - mcfeeupd.coct [03/Sep/2005:13:04:45 +1000] "GET
at-4573.zip HTTP/1.0" 200 6347829 - - [03/Sep/2005:13:04:45 +1000] "GET
5724573.upd HTTP/1.0" 403 2227
Note that all the files come from the same URL, right down to the same

No changes have been made to either the BorderManager server or the McAfee
Protection Pilot WinXP computer - it just started to fail and show the 403
error in the logs.
- I can copy the problem URL into Windows Explorer on the WinXP computer and
download the file successfully.
- The problem still occurs if the WinXP computer is logged in as a different
- The problem still occurs if I remove Access Rules.
- The downloads complete successfully if I disable authentication.

I'm running Netware 6.0 SP5 with BM 3.7 SP3 + FP4C
- with allcheck.nlm and proxy.nlm back revd to the SP2 versions to solve the
well known 403 error problem
- and ipflt31.nlm back revd to the SP3 version to cure a slow browsing
- and Craig Johnson's proxy.cfg - thanks Craig! - made it really stable.
All of this hotch-potch of a solution was really stable and problem free for
nearly 12 months - until this problem!

Any suggestions as to what to try next or how to diagnose further? Do I try
the latest FP and hope it doesn't break more than it fixes?

Thanks in advance,
Greg Skerman
Christian Outreach College Toowoomba