This is an application layer (HTTP) thing, so you better look in the server / CGI logs to see what they say and work your way back from there.