2) try doing a tcpdump on the outside interface and capture the packet data as well:
tcpdump -i $OUTSIDE -s 1500 -w output.cap host $SERVER_MACHINE
then open that capture file (output.cap) in something (ethereal is nice), and if the protocol exchanges data in clear text--you may gain a better grasp of what's going on...
I second that one. Looking only at the inside interface tells only one half of the story. Ethereal also have nice feature, if one packet of the connection is selected (say first), and than Analyze -> Follow TCP Stream, you'll get complete data exchange (coloured as input and output).
-- Aleksandar Milivojevic <amilivojevic@xxxxxx> Pollard Banknote Limited Systems Administrator 1499 Buffalo Place Tel: (204) 474-2323 ext 276 Winnipeg, MB R3T 1L7
