: The ip_masq_ftp module is installed on the fw and
: it usually works for small downloads.
: On the fw, the problem is not present.
: The download window hangs when it has reached 100%.
: With netstat , the client seems to think the connection is
: still open but it does not send out anymore packets visible
: with tcpdump on the masq'd machine.
: I remember similar problems with Netscape 1.1 long time ago
The problem may be that masq has timed out the control connection.
FTP uses 2 connections. . . 1 for data, the other for control.
When you do a long download, the control connection is idle. Masq figures
you are gone, and disconnects the control connection. Once the data
connection finishes, you hang.
There is a great masq site and documentation, but I don't remember the
URL. You can find it by going to http://sunsite.unc.edu/linux and looking
for a link to the masq howto.