iptables -A TOboxFROMinet -p tcp --dport 20 -j ACCEPT iptables -A TOboxFROMinet -p tcp --dport 21 -j ACCEPT #passive FTP $IPTABLES -A TOboxFROMinet -m state --state NEW -p tcp --syn --destination-port 60000:60200 -j ACCEPT $IPTABLES -A TOboxFROMinet -p tcp --destination-port 60000:60200 -j ACCEPT