[drhex2000]

Hi Danny,

thanks again for looking into this!
OK, my config is:

Internal Net <-> eth0(NAT) - eth1 <-> External Net

So if I undestand this correctly, the FW only sends one packet to Mozilla before breaking off, as the Secure FTP server does not pass on the AUTH and SYST FTP commands. Funnily enough, if I use /usr/bin/ftp instead of /usr/kerberos/bin/ftp (my default), it works just fine - this will be my official workaround until CP resolves kerberos FTP with the secure FTP server. Is there any way to configure the FTP commands allowed besides the SD configuration? Afai can say the server blocks some commands regardless of what I set there.

Thanks,

Florian