I have a ftp server on my DMZ (Internet -> Firewall -> DMZ) and firewall FORWARD all ftp and ftp-data to DMZ, like this: firewall: FW_FORWARD="0/0,FW_DEV_DMZ,tcp,ftp 0/0,FW_DEV_DMZ,tcp,ftp-data" I can connect on ftp and ftp-data ports (20/21) but firewall drops all passive FTP connections. I tried to FW_ALLOW_INCOMING_HIGHPORTS_TCP="yes" and FW_ALLOW_INCOMING_HIGHPORTS_TCP="ftp-data" But no sucess.. My FTP server is on DMZ (not on firewall) What I can do to this works??? Thanks ..