> iptables -t nat -A POSTROUTING -o ippp+ -j MASQUERADE So you are using NAT... Although this isn't firewalling I guess it is still using the connection tracking functionality for the NAT. You may need to "insmod ip_nat_ftp" which will load the ftp NAT module. This may also require the ip_conntrack_ftp module as well. Cheers Nigel