FTP passive through ISA

[lsblsb]

Looking for a way to allow FTP passive mode through ISA. Should this work:

outbound TCP 21 and TCP 1025 and above.

Packet Filter Name : FTP Client control connection + data connection passive
Enabled : True
Filter Mode : Allow
Filter Type : Custom
Protocol : TCP
Direction : Outbound
Local Port : Dynamic Port
Remote Port : Any Port
Local Computer Filter Applies to Computer : IP address FTP Client
Remote Computer Filter Applies to Network : All Remote Computers

inbound TCP ports 1025 and above.
Packet Filter Name : FTP Server data connection passive
Enabled : True
Filter Mode : Allow
Filter Type : Custom
Protocol : TCP
Direction : Inbound
Local Port : Dynamic Port
Remote Port : Any Port
Local Computer Filter Applies to Computer : IP address FTP Server
Remote Computer Filter Applies to Network : All Remote Computers

Thanks,
Lsb

 

[MaxImusRex]

How did you set up a that range of ports 1025 and up? I have not been able to figure out how to do it. I can give access to specific ports but not ranges. Can you help me?

 

[lsblsb]

http://isaserver.org/articles/How_the_FTP_protocol_Challenges_Firewall_Security.html

This link should provide some insight.