it turns out that RWW and OWA were forcing SSL connections on port 443, which was not forwarded to the server. I forwarded this port, and now it works. For the record, it wasn't work on any version of Firefox or IE7
More details here:
http://itknowledgeexchang...refox-3b5/