(XP IE6) Cannot log into secure pages - loops

My configuration: IE 6, XP, Dell 8200 Inspiron, Norton firewall & Anti-virus

On some web pages - specifically Dell Support & Google, I cannot log on to the second secure page using my user name and password. The system loops me back to the original form.

For example, When I load the Dell support page which has a form in which to enter service tags, etc. , I enter a correct service tag & I am looped back to the original form.

I have asked many times on the Dell BBS page how to solve this problem -- the answer is always that cookies are trying to be sent back to my system, and that my system will not accept them.

However, my system has the lowest cookie setting, and the lowest security settings. I have tried to access the Dell page when the Norton firewall & and anti-virus are disabled, and I still cannot log in.

Another person on the DEll BBS had the same problem, but was able to get in by using www.euro.dell.com -- That also did work for me, but I still cannot log into Google.

There are many questions re: this same problem on the Symantec BBS, but the answers are always regarding the cookies and no solutions are offered re: the fact that the problem still exists even though cookies are enabled, and the problem still occurs when Norton firewall & anti-virus are disabled.

The curious thing about this problem is that it happens only on some secure web pages -- I have no problem accessing my bank financial page.

I never had this problem with Windows 98SE.

I did search for answers here-- but could not find any references -- have seen this problem mentioned many times on other web pages - but no answers have been suggested.

Thanks for any help y'all can give me,

Judy

 

Uncheck the options which allow NPF to run at startup, reboot and see what happens.

 

Brett,

Thanks for the good idea....

But when I manually load Norton Firewall and then try to access the Dell or Google site,

I still cannot log on..

Any other ideas ?

 

So it did work normally after the reboot until you started NPF?

 

Reply to Brett re: log in to secure pages

Now I understand what you meant -- I tried your suggestion again doing the following:

After system booted up
Opened Norton Firewall manually
Went to Dell Support page.
Disabled Firewall just before clicking on the button to log in --

WAS LOGGED IN !!

Then, enabled Firewall and could navigate the site.

The process at Google is more complex.

Each time you click on a button during the registration process or even when posting a message on the google group pages,

you need to disable the firewall
I looked at the properties of the " button" that was blocking my entry to the next page and Google is using a

"hypertext transfer protocol with privacy"

When this problem is posted to the Dell BBS by many others - not just myself- the tech support person continues to tell everyone in his replies that we all must have a corrupted cookie. However, when I clean out my cookies,

I still have the problem
( with Norton enabled) - even though all my settings are at the lowest level.

I do not know where to find a corrupted cookie.

One sugesstion to which the Dell tech support person keeps referring is to tell everyone to go to Windows\occache and remove the listings there.

I CANNOT find anywere on my computer a Windows \occache sub-directory. All I can find when I do I search is occache.dll files.

I have no clue what these files are. The Dell rep must be talking about a different version of Windows - but he does not tell us how to find this occache in XP.

Do you know to what he is referring ?

Thanks again for your help

Judy

 

Link from Symantec

Cannot connect to secure web page

maybe it could help you!

 

Reply to "LiquidSon "

Thanks for your suggestion.

I already had implemented all the Norton solutions
on the link you suggested.

Still cannot sign on unless Norton is disabled in the manner suggested by Brett -- this is dangerous, though, because an attack can be made to your computer during those few seconds.

 

If I were you, I'd dump Norton altogether. Their stuff is way overrated. I use eTrust EZ Antivirus and Tiny Personal Firewall. My firewall runs all the time and I can use Google Groups very easily.

 

Download Albert's Rules Viewer and use it to extact and post a copy of your rules.

 

AtGaurd extracation of NIS rules

Brett, I did finally restore the 16 system-wide default rules which are extracted below.

I only changed to "permit" for the rule " access to secure web sites" -- the default was block.

------------------------------------------------------
Rule 1 Default Inbound ICMP
Category: NIS System Keeping
Rule in use: YES
Logging: NO
Protocol: ICMP
Action: Permit
Direction: Inbound
Application: -
Local Service:
..........Type: 3
..........Type: 0
..........Type: 11
Local Address: Any Address
Remote service: Any Service
Remote Address: Any Address
------------------------------------------------------
Rule 2 Default Outbound ICMP
Category: NIS System Keeping
Rule in use: YES
Logging: NO
Protocol: ICMP
Action: Permit
Direction: Outbound
Application: -
Local service: Any Service
Local Address: Any Address
Remote service: Any Service
Remote Address: Any Address
------------------------------------------------------
Rule 3 Default Inbound DNS
Category: NIS System Keeping
Rule in use: YES
Logging: NO
Protocol: UDP
Action: Permit
Direction: Inbound
Application: Any Application
Local service: Any Service
Local Address: Any Address
Remote Service:
..........Port: 53
Remote Address: Any Address
------------------------------------------------------
Rule 4 Default Outbound DNS
Category: NIS System Keeping
Rule in use: YES
Logging: NO
Protocol: TCP or UDP
Action: Permit
Direction: Outbound
Application: Any Application
Local service: Any Service
Local Address: Any Address
Remote Service:
..........Port: 53
Remote Address: Any Address
------------------------------------------------------
Rule 5 Default Inbound NetBIOS Name
Category: NIS System Keeping
Rule in use: YES
Logging: NO
Protocol: UDP
Action: Block
Direction: Inbound
Application: Any Application
Local Service:
..........Port: 137
Local Address: Any Address
Remote service: Any Service
Remote Address: Any Address
------------------------------------------------------
Rule 6 Default Inbound NetBIOS
Category: NIS System Keeping
Rule in use: YES
Logging: NO
Protocol: UDP
Action: Block
Direction: Inbound
Application: Any Application
Local Service:
..........Port: 138
Local Address: Any Address
Remote service: Any Service
Remote Address: Any Address
------------------------------------------------------
Rule 7 Default Outbound NetBIOS
Category: NIS System Keeping
Rule in use: YES
Logging: NO
Protocol: TCP or UDP
Action: Permit
Direction: Outbound
Application: Any Application
Local service: Any Service
Local Address: Any Address
Remote Service:
..........Port: 138
..........Port: 137
..........Port: 139
Remote Address: Any Address
------------------------------------------------------
Rule 8 Default Inbound Loopback
Category: NIS System Keeping
Rule in use: YES
Logging: NO
Protocol: TCP or UDP
Action: Permit
Direction: Inbound
Application: Any Application
Local service: Any Service
Local Address: (127.0.0.1)
............IP: 127.0.0.1
Remote service: Any Service
Remote Address: Any Address
------------------------------------------------------
Rule 9 Default Outbound Loopback
Category: NIS System Keeping
Rule in use: YES
Logging: NO
Protocol: TCP or UDP
Action: Permit
Direction: Outbound
Application: Any Application
Local service: Any Service
Local Address: Any Address
Remote service: Any Service
Remote Address: (127.0.0.1)
............IP: 127.0.0.1
------------------------------------------------------
Rule 11 Default Block Inbound and Outbound ICMP
Category: NIS System Keeping
Rule in use: YES
Logging: NO
Protocol: ICMP
Action: Block
Direction: Either
Application: -
Local service: Any Service
Local Address: Any Address
Remote service: Any Service
Remote Address: Any Address
------------------------------------------------------
Rule 12 Block Windows File Sharing
Category: NIS System Keeping
Rule in use: YES
Logging: YES after 0 matche(s), No Security Alert
Protocol: TCP or UDP
Action: Block
Direction: Inbound
Application: Any Application
Local Service:
..........Port: 139
Local Address: Any Address
Remote service: Any Service
Remote Address: Any Address
------------------------------------------------------
Rule 13 Default Inbound Bootp
Category: NIS System Keeping
Rule in use: YES
Logging: NO
Protocol: UDP
Action: Permit
Direction: Inbound
Application: Any Application
Local Service:
..........Port: 68
Local Address: Any Address
Remote Service:
..........Port: 67
Remote Address: Any Address
------------------------------------------------------
Rule 14 Default Outbound Bootp
Category: NIS System Keeping
Rule in use: YES
Logging: NO
Protocol: UDP
Action: Permit
Direction: Outbound
Application: Any Application
Local Service:
..........Port: 68
Local Address: Any Address
Remote Service:
..........Port: 67
Remote Address: Any Address
------------------------------------------------------
Rule 15 Default Block Microsoft Windows 2000 SMB
Category: NIS System Keeping
Rule in use: YES
Logging: YES after 0 matche(s), No Security Alert
Protocol: TCP or UDP
Action: Block
Direction: Inbound
Application: Any Application
Local Service:
..........Port: 445
Local Address: Any Address
Remote service: Any Service
Remote Address: Any Address

------------------------------------------------------
Rule 10 Block access to secure sites
Category: NIS Secure Sites
Rule in use: NO
Logging: YES after 1 matche(s), No Security Alert
Protocol: TCP
Action: Permit
Direction: Outbound
Application: Any Application
Local service: Any Service
Local Address: Any Address
Remote Service:
..........Port: 443
Remote Address: Any Address

-------------------

Thanks again for your help, Judy

 

Doh! I was hoping that there'd be an obvious error in the rules - but, alas, there ain't.

Try looking under Customize Privacy Settings in the Privacy CP and ensure that Secure Connections are enabled.

Also, what version of NIS/NPF do you have?

BTW, there's almost no risk in briefly disabling the PF whilst your browse HTTPS sites.

 

I do have the "enable secure connections" checked,

version of NPF is 4.1.06.

Could the problem be on the web site computer -- not on my computer ?

Since so many people have this same problem.....

 

10-4 to that! I'm with you ShadowHawk. Overrated may be a little bit mild! EZ Virus me yes, like Tiny also, but like Zonealarm 2.6 (NOT3.0) best.

Judy no this would not be the site you visit, highly unlikely!

Clearly firewall or firewall config problem as evidenced by the fact that it works when you turn the firewall off.

Perchance do you have the XP firewall on as well???? tsk tsk tsk!

Mike

 

I doubt that it's anything to do with the sites. The fact that you are able to broswer normally with NPF disabled rather supports this view.

I'd suggest that you bounce this issue to Symantec support and see what they come back with.

In the meantime, you may wish to try a different firewall (I use Kerio - it's free and, IMO, a better product than NPF).

 

reply to mflynn and brett

mflynn --

you asked if I had the XP firewall on too...

I do not know where to find the XP firewall to figure out if it is ON or OFF...

I searched for the firewall and did not find...

What security settings do you recommend in IE 6 ??

Brett --

thanks again for all your ideas - and I will try Kerio.


I have been in touch with both e-mail & "duscussion group" tech support at Symantec

...this subject is one of the "hot topics" on the disscussion group BBS --

NO solutions yet .... I have tried all solutions recommended.

 

Judy try this!

Go to start run and type

ipconfig /flushdns

Recheck for your problem, report results!

Mike

 

to mflynn re: XP firewall

Hello again,

I do NOT have the IE firewall enabled.

Should I ??

OR should I not ??

Thanks for your help.

 

No Judy not if you are running any other firewall. It will work but "NOT" a good idea. Besides the xp firewall is almost no firewall.

The only reason I asked was that it may be a complicating factor in your secure site access problem.

Did you do the /flushdns?

The last post on this thead was Dec 9, I assumed your problem was corrected. Is it?

Mike
EDITED to at NOT as above.

 

Hi Judy

For what it is worth, I too had the same problem as you. To solve it, I completely removed NPF from the Control Panel Add\Remove
I then re-installed NPF and so far everything seems fine.

Also look here for Windows XP firewall.

1> Control Panel
2> Network and Internet Connections
3> Rt. click your connection
4> Properties
5> Advanced

mopar.

 

Very good advice Mopar!

Do this judy. You do have the CD to reinstall I hope.

After uninstall make sure, if it don't ask, to reboot before reininstall.

Mike