Don't use the server download instead of the fastdownload, the sv_allowDownload must be 0. If it's 1 with q3dirtrav easy to download almost everything from the server e.g the passwd file or config files. Those can contain passwords as plain text.
Not if you use libcod.
Still, what ni3ls says is correct. Connect to your server with a cleaned-up main then check the client's console for missing files. Add those to your iwd.
"Does not work" is an error report for a bug between keyboard and chair.