ssl connection trashed

[billnoble]

we recently moved our nat and pat addresses to a new address block
and ajusted our pix external address to be in the same subnet.
there is now a single ssl web site we can not reach from "inside". the rest of the ssl world seems to functon normally. looking a sniff of the packets we get sync and ack packets back from the web site but the remote server immediately closes the connection with fin packets.
i suspect there is something that our pat is doing to our outgoing packets that the remote server does not like.
btw this site worked before we made this address change.
we have even disconnected the
pix and put a host in place with our pat address on it and ..no problems getting to this site.
has anybody heard of such a problem.

 

[yizhar]

HI.

Did you try contacting the web site administrator?
Maybe s/he can find more clues from his point of management.
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[billnoble]

well it turns out that the problem was not pix related..
the website/server at issue was doing paranoid dns lookups
...once we provided the forward res for our nat pool..the
problem went away...side note:
the website admins had no idea they were doing this..
makes life funky doesn't it?

 

[asafayan]

Yea, makes life real funked up...