# quick allow other ports for passive ftp (or the other kind) echo "Enabling pass through for internal machines using port range" /sbin/ipchains -A input -i eth1 -p TCP -s 192.168.0.0/24 -d any/0 3000:65000 -j ACCEPT /sbin/ipchains -A output -i eth0 -p TCP -d any/0 3000:65000 -j ACCEPT /sbin/ipchains -A input -i eth0 -p TCP -s any/0 3000:65000 -j ACCEPT /sbin/ipchains -A output -i eth1 -p TCP -s any/0 3000:65000 -j ACCEPT