On Thu, Mar 06, 2003 at 01:44:21PM +0100, km wrote: > > Hello! > > I have a problem with ipfilter and Windows XP while downloading files larger > than ~285kb via HTTP/FTP. > > Background: > > Im administrating a small office LAN with mainly Win2k workstations, but also > some laptops with Windows XP. The firewall/gateway machine is running > FreeBSD 4.7-STABLE and ipfilter 3.4.29. >
Try to make a tcpdump of a hanging session, from begin to end (== where it hangs). Make it from that side of the firewall where all packets are seen. Make sure you have the -x option such that packet contents are dumped as well. Also make sure you have a -s 80 or something so that all relevant option fields will be present. Btw: the 23x value means that this same packet was blocked 23 times in sequence. Be sure to include these duplciates when hanging, as it will show what packet gets blocked. -Guido
