Hi, It occurs to me that multipath routing (http://www.openbsd.org/faq/faq6.html#Multipath) might not play nicely with ftp-proxy on a firewall because passive ftp sessions could multiplex the data and control connections via different ISPs. My assumption here is that if you're using multipath routing and 2 ISPs then your NATting, so the ftp server on the Internet would see the control connection from one ISP and the data connection from another, leading to failure.
Is this a correct analysis or am I missing something? Karl <k...@meme.com> Free Software: "You don't pay back, you pay forward." -- Robert A. Heinlein