rsync connection to Windows 2008 Server

[jhall at socket.net]

I have run into a problem that I cannot find the answer to using Google 
and I am hoping someone has seen this before. 

I am connecting to a Windows 2008 server running cwRsync as a daemon.  One 
of my six sites will not connect to the server.  No error messages are 
seen in the cwRsync log file or the Event Viewer on the Windows 2008 
computer. 

My network configuration is as follows.

STL --WAN-- Firewall --IPsec Tunnel -- 192.168.100.56.

On the remote computer, using the following command line, and I receive 
the following messages. 
rsync -avz  /home 192.168.100.56::Homes
rsync: read error: Connection reset by peer (54)
rsync error: error in rsync protocol data stream (code 12) at io.c(604) 
[sender=2.6.9] 

Looking at tcpdump, I think the connection is started, but the computer on 
my end is not responding after a certain time. 

12:00:17.817759 IP (tos 0x0, ttl  64, id 64973, offset 0, flags [DF], 
proto: TCP (6), length: 64) N-ST-LOUIS.65460 > 192.168.100.56.rsync: S, 
cksum 0x9834 (correct), 1279331061:1279331061(0) win 65535 <mss 
1460,nop,wscale 1,nop,nop,timestamp 486332914 0,sackOK,eol> 
12:00:17.817891 IP (tos 0x0, ttl  64, id 64973, offset 0, flags [DF], 
proto: TCP (6), length: 64) N-ST-LOUIS.65460 > 192.168.100.56.rsync: S, 
cksum 0x9834 (correct), 1279331061:1279331061(0) win 65535 <mss 
1460,nop,wscale 1,nop,nop,timestamp 486332914 0,sackOK,eol> 
12:00:17.871976 IP (tos 0x0, ttl  63, id 11982, offset 0, flags [none], 
proto: TCP (6), length: 52) 192.168.100.56.rsync > N-ST-LOUIS.65460: S, 
cksum 0xb379 (correct), 992395985:992395985(0) ack 1279331062 win 5640 
<mss 1380,nop,nop,sackOK,nop,wscale 0> 
12:00:17.872064 IP (tos 0x0, ttl  64, id 64974, offset 0, flags [DF], 
proto: TCP (6), length: 40) N-ST-LOUIS.65460 > 192.168.100.56.rsync: ., 
cksum 0x889c (correct), 1:1(0) ack 1 win 33120 
12:00:17.872233 IP (tos 0x0, ttl  64, id 64974, offset 0, flags [DF], 
proto: TCP (6), length: 40) N-ST-LOUIS.65460 > 192.168.100.56.rsync: ., 
cksum 0x889c (correct), 1:1(0) ack 1 win 33120 
12:00:17.872280 IP (tos 0x0, ttl  64, id 64975, offset 0, flags [DF], 
proto: TCP (6), length: 52) N-ST-LOUIS.65460 > 192.168.100.56.rsync: P, 
cksum 0x0923 (correct), 1:13(12) ack 1 win 33120 
12:00:17.872349 IP (tos 0x0, ttl  64, id 64975, offset 0, flags [DF], 
proto: TCP (6), length: 52) N-ST-LOUIS.65460 > 192.168.100.56.rsync: P, 
cksum 0x0923 (correct), 1:13(12) ack 1 win 33120 
12:00:17.872592 IP (tos 0x0, ttl  63, id 11984, offset 0, flags [none], 
proto: TCP (6), length: 40) 192.168.100.56.rsync > N-ST-LOUIS.65460: ., 
cksum 0x0f00 (correct), 1:1(0) ack 13 win 64240 
12:00:38.882477 IP (tos 0x0, ttl  63, id 12123, offset 0, flags [none], 
proto: TCP (6), length: 40) 192.168.100.56.rsync > N-ST-LOUIS.65460: R, 
cksum 0x4848 (correct), 992395986:992395986(0) win 4344 

For testing, my firewall rules were set to pass in quick all, pass out 
quick all.  The remote server is at the end of an ipsec tunnel maintained 
by racoon.  Ping times are reasonable 53ms between sites.  What really 
baffles me is the other five (5) sites I maintain are connecting without 
any problems.  All are running the same version of rsync. 

Any suggestions would be greatly appreciated.

Thanks,


Jay