Filtering - DENY (bong-file) does not show/work

Question

I have a very simple filter setup with only 2 entries, so 99.99% of the Internet gets blocked.
The custom Deny HTML page I have setup does not display on the clients computer when going to a page not in the allow list.
What am I doing wrong?
# You can edit this file, but comments and formatting changes
# might be lost when the admin server makes changes.
# Use only forward slashes in pathnames--backslashes can cause
# problems. See the documentation for more information.
Init fn="flex-init" access="$accesslog" format.access="%Ses->client.ip% - %Req->vars.auth-user% [%SYSDATE%] \"%Req->reqpb.clf-request%\" %Req->srvhdrs.clf-status% %Req->vars.p2c-cl% %Req->vars.remote-status% %Req->vars.r2p-cl% %Req->headers.content-length% %Req->vars.p2r-cl% %Req->vars.c2p-hl% %Req->vars.p2c-hl% %Req->vars.p2r-hl% %Req->vars.r2p-hl% %Req->vars.xfer-time%"
Init fn="init-proxy" timeout="300" timeout-2="15"
Init Test="C:/Sun/ProxyServer40/proxy-server1/config/Test.url" fn="init-url-filter" Test2="C:/Sun/ProxyServer40/proxy-server1/config/Test2.url"
<Object name="default">
AuthTrans fn="match-browser" browser=".*MSIE.*" ssl-unclean-shutdown="true"
PathCheck fn="url-check"
PathCheck fn="url-filter" allow="Test" bong-file="C:\\DENY.html"
ObjectType fn="block-ip"
Service fn="deny-service"
AddLog fn="flex-log" name="access"
</Object>
<Object name="file">
PathCheck fn="nt-uri-clean"
PathCheck fn="find-index" index-names="index.html"
ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service fn="send-file"
</Object>
<Object ppath="ftp://.*">
ObjectType fn="cache-enable" query-maxlen="10" log-report="off"
ObjectType fn="cache-setting" lm-factor="0.10" max-uncheck="7200"
Service fn="proxy-retrieve"
</Object>
<Object ppath="http://.*">
ObjectType fn="cache-enable" query-maxlen="10" log-report="off"
ObjectType fn="cache-setting" lm-factor="0.10" max-uncheck="7200"
Service fn="proxy-retrieve" method="*"
</Object>
<Object ppath="https://.*">
Service fn="proxy-retrieve"
</Object>
<Object ppath="gopher://.*">
ObjectType fn="cache-enable" query-maxlen="10" log-report="off"
ObjectType fn="cache-setting" lm-factor="0.10" max-uncheck="7200"
Service fn="proxy-retrieve"
</Object>
<Object ppath="connect://.*:443">
Service fn="connect" method="CONNECT"
</Object>
<Object ppath="connect://.*:563">
Service fn="connect" method="CONNECT"
</Object>The one odd thing. If the page i am viewing is using frames in the HTML code and there is a link to a page not in the allow list, the main frame that the link would display in does correctly show the deny html page. However, as said before, a simple request to say http:.//www.sun.com for example shows the browser's built in forbidden page.
Thanks

Answer 1

What ever default page the browser has for forbidden pages.
Like these:
[http://www.msexchange.org/img/upl/image0641086263614188.jpg|http://www.msexchange.org/img/upl/image0641086263614188.jpg]
[http://www.wictorwilen.se/WindowsLiveWriter/HTTP403ForbiddeninaSharePointsitewhenadd_D274/image.png|http://www.wictorwilen.se/WindowsLiveWriter/HTTP403ForbiddeninaSharePointsitewhenadd_D274/image.png]
[http://blog.stealthpuppy.com/images/cs/1000.14.124.403Forbidden.png|http://blog.stealthpuppy.com/images/cs/1000.14.124.403Forbidden.png]