general/5047: Apache sends requests to MSIE 5.0 client to resend packet 1

[Jason Rothstein <jr...@1stbuy.com>]

>Number:         5047
>Category:       general
>Synopsis:       Apache sends requests to MSIE 5.0 client to resend packet 1
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    apache
>State:          open
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Mon Sep 20 11:20:00 PDT 1999
>Last-Modified:
>Originator:     jrothste@1stbuy.com
>Organization:
apache
>Release:        1.3.6 (RedHat Secure Webserver 6.0)
>Environment:
RedHat Linux 6.0, all current errata applied. On Cyrix MII 333.
Compiler is EGCS 1.1.2 I think. Apache is installed from the RedHat Secure 
E-Commerce Edition 6.0 (RedHat Secure Webserver 3.0)
>Description:
MSIE 5.0 Client connected to webserver, and browsed around. A short while 
later I noticed the webserver flooded the network with packets to the MSIE 5.0
client machine. Client is Windows 98, MSIE 5.0 with all current items from
MS Windows Update.

tcpdump reports packets of the following (info in right half columns)
". ack 1 window 32777" comming from the http port on webserver to port 1974 
on client machine.

My guess is that it is requesting the client to resend a packet in the
connection that the client thinks is closed already.
>How-To-Repeat:
User Windows 98 with IE5.0 (client identifer includes DigExt for this particular
user so I don't know where/how user got this copy of IE5.0) and connect to any
RedHat Linux 6.0 Secure E-Commerce Edition machine.

I don't know if this will happen out of the box in either case, and I cannot
duplicate this problem as it has just disappeared.
>Fix:
I have no idea. block MSIE from the server? :P
>Audit-Trail:
>Unformatted:
[In order for any reply to be added to the PR database, you need]
[to include <ap...@Apache.Org> in the Cc line and make sure the]
[subject line starts with the report component and number, with ]
[or without any 'Re:' prefixes (such as "general/1098:" or      ]
["Re: general/1098:").  If the subject doesn't match this       ]
[pattern, your message will be misfiled and ignored.  The       ]
["apbugs" address is not added to the Cc line of messages from  ]
[the database automatically because of the potential for mail   ]
[loops.  If you do not include this Cc, your reply may be ig-   ]
[nored unless you are responding to an explicit request from a  ]
[developer.  Reply only with text; DO NOT SEND ATTACHMENTS!     ]