Haven't looked at the cap files but have had a couple of experiences
with IE vs Firefox through our firewall. IE uses loads more sessions
which it doesn't close too cleanly. We were bitten by source state
tracking. Are you keeping state on these connections and are you source
IP state tracking?? If so IE needs number of source IP states set higher
than other browsers.
James Nachlin wrote:
I'm having a strange situation where I'm getting back errors when
connecting to a web server (lighttpd) from IE, which I do not get from
firefox and I don't get connecting directly, not through the pf firewall.
To the client, this appears as slow connections or dropped
connections. Looking at the traffic with Ethereal, the main
difference seems to be the presence of tons of packets with the RST
flag set.
The problem will probably be obvious to someone who knows more about
TCP/IP.
At the risk of providing too much information, I'm attaching cap
files. Hope this list doesn't strip attachments.
Any help appreciated!