Not sure if anyone has seen anything like this before.
I have a PIX 520 with some web sites in a DMZ. When I try to access these Web sites via a certain ISP provider's cable modems, it can't complete the 3-way handshake and display the pages. I've sniffed the traffic with Ethereal and after the SYN I get an (ICMP - Code 13: Communication Administratively Filtered message)
But, I can access the sites from various other providers either through DSL or dial-up with no problem. And the sites appear normally for everyone else.
When I do a traceroute from this provider to the Web address it is successful. The traffic is hitting the PIX because I see the PIX ACLs incrementing when testing. I've completely opened the ACL's on the PIX and still no luck.
The cable ISP provider is of no help because when we call for support the techs are able to access the sites. This is what is leading me to believe it is an issue with the cable modems. I've tried it from at least 4 different modems and locations and it's the same story each time.