Haven't looked at the cap files but have had a couple of experiences with IE vs Firefox through our firewall. IE uses loads more sessions which it doesn't close too cleanly. We were bitten by source state tracking. Are you keeping state on these connections and are you source IP state tracking?? If so IE needs number of source IP states set higher than other browsers.

James Nachlin wrote:
I'm having a strange situation where I'm getting back errors when connecting to a web server (lighttpd) from IE, which I do not get from firefox and I don't get connecting directly, not through the pf firewall.

To the client, this appears as slow connections or dropped connections. Looking at the traffic with Ethereal, the main difference seems to be the presence of tons of packets with the RST flag set.

The problem will probably be obvious to someone who knows more about TCP/IP.

At the risk of providing too much information, I'm attaching cap files. Hope this list doesn't strip attachments.

Any help appreciated!


Reply via email to