===ipf rules=== pass in quick on sip0 proto tcp from any to 83.xxx.104.34 port = 21 keep state # FTP Cmd pass in quick on sip0 proto tcp from any to 83.xxx.104.34 port 64000 >< 65000 flags S keep state # FTP Passive pass in quick on sip1 proto tcp from 83.xxx.104.34 port = 20 to any keep state # FTP Data (Active) SIP0 is the Public Interface, SIP1 is the DMZ One. 83.xxx.104.34 is the public FTP's address ===Configuration sample (proftpd)=== PassivePorts 64000 65000 IdentLookups off ===Links=== * [[http://slacksite.com/other/ftp.html|About FTP (active, passive)]]