rc.firewall rule for passive FTP

[Noah]

Lowell Gilbert wrote:
> Noah <admin2 at enabled.com> writes:
>
>   
>> what is a good rule to allow passive FTP to work.
>>
>> the following rules still blocks passive FTP.
>>
>>        #/** Allow setup of FTP PASSIVE **/
>>        ${fwcmd} add allow tcp from any to ${ip} 49152-65534 setup
>>     
>
> If the passive FTP client is on ${ip}, then that's the wrong
> direction; it needs to be able to *send* the SYN.
>   



the {$ip} refers to the IP address of rthe server.  might you please 
help me rewrite this rule?

Cheers,
Noah