got a really strange one for you all.
I have a network setup using a linux machine as a gateway between various network segments (on seperate nic's) and virtual machines (one of which is a mail server) all managed by shorewall and bind9.
This has all been running happily for ages, but on the weekend the servers went down and were rebooted. Since then, the windows machine (ONLY) are having problems opening anything of any size on the network. For example, email has a web page that will open to the point of login, and then hang. The mail clients can download the headers of messages, but not the body of the messages. Opening shared documents is no issue, but saving them is VERY VERY slow and usually times out. However, Mac and Linux machines have no issues at all. This is windows only, and only on the internal network. Access to all of this from outside, on any platform, is no problem.
I see this same behaviour from a windows machine running as a virtual box client on a linux host that has no issues.
I'm out of ideas. I've done packet sniffing, and apart from a bunch of retries from the windows machines that I don't see on Linux, no issues that jump out at me.
How would you suggest I try and fault find this? What does the windows stack do differently to the linux/mac stack?
Are the slow connections through your firewall or also on local segments? Are the non-Windows machines connecting the same way to the same services from the same ports on the firewall? That is, you have a mac and a windows machine plugged into the same switch in the closet, they both try to open the same email in the same web page. With that kind of comparison, what do you see?
Is it possible an interface on the router/firewall is set to the wrong speed after the reboot (this has happened to me)?
When in doubt, I blame the Windows "tuning" settings for TCP/IP: http://www.speedguide.net/articles/windows-7-vista-2008-tweaks-2574 and http://www.riccardoriva.info/blog/?p=1286 for information on the subject. And yes, this can cause issues even in a LAN setting, but generally only in the presence of a speed change for a connection somewhere.