> sh/bash: export FTP_PASSIVE_MODE=true Ah... because in passive mode, the client (my server) sets the data port, and my PF rules allow return data on the port used for the request. Okay... that makes sense, I think... (little by little, it sinks in...) -- John