Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My firm has hosted exchange (2003) that can be accessed using outlook or https which has worked for years. Last Friday night it appears that all Vista and Windows 7 machines began resetting the ssl connection. XP machines seem ok.

We are able to ping, tracert and telnet -80 to the hosted exchange machine. Our firewall consultant ran packet capture and reviewed the rules to verify traffic is getting in and out of the lan.

I've run wireshark on a client experiencing this problem; there are 23 frames from beginning to reset. I can follow the port selection, encrypted handshake, etc, and eventually the RST.

Why is the RST being sent? I see errors but I'm not sure which are significant. I see incorrect header checksums, a change cipher spec, a handful of [TCP Retransmission][TCP segment of a reassembled PDU] info records.

Another part of the conversation I don't understand is between out gateway and the client; a "Redirect (Redirect for network)" message using ICMP.

How can you figure out what's causing the RST?

share|improve this question
up vote 0 down vote accepted

The ISP was dropping packets. No explanation provided.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.