Im thinking I found the issue, after no one else has the problem... it was a wrong NAT-setting on the firewall for that special net.... which takes another effect with IDS (block after some 404)
So the confusion was complete...
It seems its running now.
Thanks for help!!