Ftp from DMZ with SuSEfirewall2 v1.7

Hello, I've setup an Firewall with SuSEfirweall2 v1.7. It has got 3 Interfaces. EXT, DMZ and INT. In the DMZ is a Server running Squid and Sendmail=20 My Problem is, the Server in the DMZ can't do Ftp. I allowed outgoing ftp in FW_FORWARD. Works fine. But if the Server outside starts to send Data from Port 20 the Firewall drops the Packets=20 (SuSE-FW-DROP-DEFAULTIN=3D... spt=3D20 dpt=3Dxxxxx) Ftp from the Firewall itself works fine.=20 I tried to set ftp-data in FW_ALLOW_INCOMING_HIGHPORTS. Didn't work.=20 I tried a Rule for ftp-data in any Direction in FW_FORWARD.=20 Didn't work. Can anyone help? -- Mit freundlichem Gruss Willi Brune