what is a good rule to allow passive FTP to work. the following rules still blocks passive FTP. #/** Allow setup of FTP PASSIVE **/ ${fwcmd} add allow tcp from any to ${ip} 49152-65534 setup