Firewall settings for FTP active and passive mode

I will like to create a rule that allows FTP clients to access my local FTP server.

I have opened ports 20 and 21 on the firewall but this does not work, as the data port in active mode is not guaranteed to be 20. More like a*256 + b where a and b are greater than 1.

FileZilla was being rejected.

Then within my FTP rule, I added local port range 6000-6200 and set my FileZilla client to active mode, giving it this port range, Still no go. I am using ESET SS v5.

Any ideas?

 

If you set a port range, you need to set PASV mode on both your server and your client. Alternatively, you could create a rule allowing all traffic for your ftp server's .exe file.