ftp problem

2010-01-08 Thread M. Keith Thompson
Yes, that is what he meant and I fixed it. ___ freebsd-pf@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-pf To unsubscribe, send any mail to "freebsd-pf-unsubscr...@freebsd.org"

Re: ftp problem

2010-01-08 Thread M. Keith Thompson
It looks like it was a tcp windowing problem. The command: "sysctl -w sysctl net.inet.tcp.rfc1323=0" fixed the problem. Thanks for all of the suggestions and help. On Fri, Jan 8, 2010 at 7:51 AM, M. Keith Thompson wrote: > On Thu, Jan 7, 2010 at 10:18 PM, J65nko wrote: >>

Re: ftp problem

2010-01-08 Thread M. Keith Thompson
On Thu, Jan 7, 2010 at 10:18 PM, J65nko wrote: > On Thu, Jan 7, 2010 at 10:19 PM, M. Keith Thompson > wrote: >> On Thu, Jan 7, 2010 at 2:37 PM, J65nko wrote: >>>> # SSH from NetEng subnet >>>> pass in quick log on $ext_if proto tcp from $net_en

Re: ftp problem

2010-01-07 Thread M. Keith Thompson
On Thu, Jan 7, 2010 at 2:37 PM, J65nko wrote: >> # SSH from NetEng subnet >> pass in quick log on $ext_if proto tcp from $net_eng to $ext_if port >> 22 keep state >> >> # Allow inside network to ping the server >> pass in quick on $ext_if proto icmp from $pingers to $ext_IP keep state >> >> # Allo

ftp problem

2010-01-07 Thread M. Keith Thompson
It does a list first to see which file to get. Then it tries to download the 1st file. It starts downloading the file around: 14:40:49.668739 ___ freebsd-pf@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-pf To unsubscribe, s

Re: ftp problem

2010-01-06 Thread M. Keith Thompson
On 01/06/10 09:57, M. Keith Thompson wrote: > The states and tcpdump are with scrub turned off. I tried that and it > did not change things. > > Unsuccessful: > > self tcp xxx.yyy.15.125:21<- vvv.zzz.226.92:50187 TIME_WAIT:TIME_WAIT > self tcp xxx.yyy.15.125:2

Re: ftp problem

2010-01-06 Thread M. Keith Thompson
t), 971:971(0) ack 297 win 33026 11:41:18.366766 IP (tos 0x0, ttl 52, id 919, offset 0, flags [none], proto: TCP (6), length: 40) vvv.zzz.226.92.50187 > xxx.yyy.15.125.ftp: R, cksum 0xe896 (correct), 1708289771:1708289771(0) win 0 11:41:18.366772 IP (tos 0x0, ttl 52, id 920, offset 0, flags [none],

ftp problem

2010-01-06 Thread M. Keith Thompson
I have a very screwy problem. I have a pure-ftp server running pf on FreeBSD 7.0. For the most part the server works fine; users upload and download multi-megabyte files daily. However, I have one client (HP-UX) that can not get files larger that 98K. If I turn off pf, it works fine. The pflog