> >A packet trace shows a TCP reset from the Check Point FW-1 NG FP2
[...]
> This should be a FAQ:
> 
> Try commenting out the following line in
> 
>         $FWDIR/lib/base.def and reinstall the policy:
> 
>         #define FTP_ENFORCE_NL

Probably should add that if you are not the system administrator and the
system administrator at your organization will not modify the CP FW1
configuration, then you will not be able to use ftp.netbsd.org and many
other ftp hosts.  There are a precious few netbsd mirrors which use
wu-2.6.0 ftp daemon or like which is compatible with CP FW1.  Try a few
of the mirrors closs to you to see if you can find one.

henry nelson