Occasionally, one of my users will be unable to connect to our web-based email (simple timeout, page cannot be displayed, errors). The problem persists for days (and between reboots) then eventually resolves itself, only to reoccur some time later. I checked all the basics, then broke down and took a packet capture.
It looks like the mail server simply does not respond.
Packets go out, and after a while, a reset would come in. The user was initially behind double NAT. After removing the second router, the resets disappeared, leading me to believe something in the middle was sending resets. Now I see
Bad CheckSum errors on the requests sent from the browser. I disabled TCP checksum offloading, which changed nothing. Most other packets do not show a
Bad CheckSum error. All of the packets headed towards our server do show the error.
The site works on other computers on the network. If I switch to a mobile hotspot, the site works. If I load the site in web-based proxy, it works (probably irrelevant). Switching to WiFi on the same connection (to eliminate driver issues) does not work. I checked the firewall and logs server-side; everything seems normal.
What can I do to troubleshoot this issue?
Sorry for the bad title. If you think of something clearer, feel free to edit.