> > > .... Thank you for the info. My question now is, will your rule > > > take care of both passive and active ftp ? I would prefer to just > > > use active .. But > > ip_conntrack_ftp does handle both passive and active ftp. > Any thoughts on my last question ? As far as I see, Antony answered your last question : both passive and active ftp are handled. Or am I missing something ? Gr, Rob