Many browsers do not send refering page data on a meta-refresh. They treat the refresh as a typed in url. Because of this, the request will fail on the http-referer test ...

Intel x86 hardware platforms

Microsoft Windows NT Server / IIS 4.0
Microsoft Windows 2000 Server / IIS 5.0+
Microsoft SQL Server 7.0+

all iis site permissions set to anonymous access only ...