Applies to:
Known to affect Windows 2000 and Windows XP with Internet Explorer Versions 5.5 SP2, 6.0 and 6.0 SP1. (Possibly others)
Symptoms:
Used to be able to access and use secured websites. These may include On-Line Banking sites or shipping sites like Fedex.com for account management. Suddenly, the site loads very slow, not at all, or when you log in, it sticks waiting to login.
Issue:
Information to, from and across the Internet are sent in what are called packets, or envelopes. These come in various sizes depending on the nature of the request and amount of information. For example, a ping is a very small packet size while a web page with lots of graphics and material will use many (possible hundreds) of large packets to transport all the information to you. Think of it as a difference between a post card and an envelope that contains your tax returns.
Sometimes, the packet size is restricted by either a firewall, a router on the Internet, or by one of the computers. Generally, the packet (MTU) size is negotiated between the two computers involved and generally less than 1500. If the MTU size is not negotiated properly, routers and firewalls have the ability to fragment the packets into smaller sizes that can then pass correctly.
However, in the case of some secure websites, the security software installed sees that the packets have been fragmented or otherwise altered, and take that as an indication that the information in the packet is possibly malicious, and silently drops it. In the mean time, the requesting computer is sitting there waiting and waiting, until it finally times itself out.
This can also be caused be either a router, firewall or computer in the path which is blocking ICMP Code3 Type 4 packets, which blocks the sending computer or firewall from discovering the MTU path and/or size available.
Resolution:
Important: The resolution involves modifying the registry. Only do this if you are absolutely sure of what you are doing. Making a mistake while modifying the registry could render your computer useless, and require a reinstallation of the operating system.
