pf(4) + fetch(1) + http://ftp.gnu.org

[RW]

On Sun, 17 Jun 2007 04:49:21 +0200
Sten Daniel Soersdal <netslists at gmail.com> wrote:

> My guess is, your path-mtu is lower at some point between you and 
> ftp.gnu.org which (may or may not) result in an icmp packet
> indicating that the packet was dropped as fragmentation was needed
> but DF flag was set.

Vlad replied to me privately, and it seems that removing modulate fixed
it.

Modulate turns on tcp-proxying, which allows pf to rewrite initial
sequence numbers, and I guess there's a problem somewhere in that code.
It does seem to be site or route specific though.