There are five lines in the log sequence for (f) as described below. The first is a request for login_card with a blank referrer - either typed direct or grabbed from a bookmark. The remaining four requests are for images referenced on the login page.

All requests are served with a 200 (OK) response code.

There's no subsequent activity from that client IP until we get a request for our default document 25 minutes later - that request is redirected back to the login page.

I can't reconcile these logs with the description we received from the client. Something very odd must be happening, or perhaps they're seeing a local proxy error page which is getting mistaken for ours?

Anyway, we now have the maintenance mailer in place so we'll find out exactly what's going on next time this happens.

Signing it off for now,
T
- posted by Tim Bruce @ 3:47 PM