ftpd: Passive mode isn't working

[a non y mouse]

Kristian Vaaf wrote:

> ftp is working.
> Active mode works, passive mode doesn't.

i just scanned over your ruleset...so forgive me if i am way off base

with that said, are you using the freebsd ftpd? did you change the
portrange.hifirst and .hilast sysctl values? because it would appear to
me that unless you have done so, you are not allowing all ports which
will be used by ftpd in passive mode:

tinker% sysctl -a | grep portrange.hi
net.inet.ip.portrange.hifirst: 49152
net.inet.ip.portrange.hilast: 65535