Likely it's a software issue, as in a software firewall, or virus scanner, or internet security suite... Something there should have an option which states "block referral variable" which is the culprit, something isn't allowing it to pass data as a "security" feature...