Some of the HTTP servers I scan do not return 404 on a not-found page.
They return a 302 Found with a Location: header containing a URL that goes
to a customerror.aspx script, every time. This should be easy to
recognize, but I don't know how to tell Nessus 2.x that when it gets a 302
with a Location: containing that aspx script, it's to treat it as a 404.
Instead, the no404.nasl seems to follow the redirect, then gets lost on the
200 OK page that it receives from the customerror.aspx URL, not finding any
text in the body that matches what it's got for the body error message in
no404.nasl.
Is there a way to do what I want, and get it to recognize the
customerror.aspx script in the Location: header?
---
"The avalanche has already begun. It is too late for the pebbles to vote."
-- Kosh