Hi, You must add the RELATED state to : IPTABLES -A INPUT -p tcp --sport 1024:65535 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT Because passive FTP creates a new connection, your rule only accept ESTABLISHED packets and no SYN. Florent