If TIMEOUTclose value is positive, stunnel does not transmit TCP FIN, even though application sends TCP FIN, until timeout time expires I don't know why stunnel designer chose it, maybe because of the performance, or some others. Some of the browsers do not start to display the page until receiving the entire packet. And one of the trigger for the browser to detect to receive the whole is TCP FIN. From that things, such kind of the problem of yours occurs.

regards taka

On Fri, 4 Mar 2005 10:39:47 -0800 (PST), gary ng garyng2000@yahoo.com wrote:

Thanks, that did the trick. Just wonder why the document said this is needed for MSIE while I was using firefox. Seems to be more like a Window(I believe even firefox relis on the underlying socket library) than simply MSIE.

--- "ikeda@areabe" ikeda@areabe.com wrote:

...

add TIMEOUTclose = 0 in stunnel.conf

regards taka

__________________________________ Celebrate Yahoo!'s 10th Birthday! Yahoo! Netrospective: 100 Moments of the Web http://birthday.yahoo.com/netrospective/