My problem is not how to run ftp server behind firewall. My problem how to
allow access to ftp servers in WAN from LAN.
When I block in the RULES all outgouing packets except TCP FTP, ftp
transfers works only when not PASV required. PASV requires to establish new
connection on the not predetermined ports (another server by server). How to
set RULES?

Thanks, D.M.