On 1/19/07, Jasper Bryant-Greene wrote:

[root(a)firewall1 root]# mii-tool eth0: negotiated 100baseTx-FD flow-control, link ok eth1: negotiated 100baseTx-FD flow-control, link ok

Looks ok to me. Fixing it with mii-tool -F 100baseTx-FD makes no difference to transfer rates.

What devices are connected to each interface on this firewall and what do they say about duplex and collisions / otherwise errored packets? 100Mb NICs and switches are notorious for misbehaving in ways that cripple throughput as you describe. Mark.