My firewall is killing the connection.
The customer wants to start a ftp session then on that same connection negotiate wth SSL ?. Seems the firewall gives the 3way handshake then sends a reset packet back to the client once they try to start the SSL session. At 1st glance it looks like the server is sending the reset back but because the firewall is natting the ftp server to an internet routable address, the firewall is rejecting the packets