Hi everyone, how does one specify in the ipf rules that we want to let machines inside a firewall do active FTP and outside the firewall only passive ftp? I do not need ipnat as the machines inside the firewall already have public ip addresses, so no need for mapping. Thank you, vh