Not familiar with Shorewall and I didn't fully read the rules above but what I'm not seeing is an entry stating : RELATED,ESTABLISHED or something. My guess is you need such a rule.
Shorewall provides such rules automatically.
And are you loading the ftp helper module ?
I suspect that is the problem. The OP has also posted on the Shorewall list where I've replied as well.
-Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@xxxxxxxxxxxxx
