Manuel wrote:
> It may be a problem with the NAT - the banner on ftp.netbsd.org
> triggers problems in some versions of pf too.
> Maybe try to add a '-' before your passwd (email address), it should
> suppress the greeting banner.

That works, 100% of the time.  Thank you.

Andrew wrote:
> Are you using PPPoE or some other sub 1500 MTU connection from the
> NetBSD NAT box?

Nope.  Plain 10baseT Ethernet between the NAT box and the DSL router,
and standard DSL from there -- no PPPoE.  The firewall/NAT code is a
bit dated -- ipf/ipnat v3.4.9 from (approximately) the 1.5.2 days.

A