If the host/domain name has an underscore in it IE 6 (and IE5 with up to date security patches) will not send session cookies to it because it does not have a valid name (underscores are illegal in TCP/IP host names), whereas Firefox doesn’t care.. I think IE7 is also strict about hostnames too.