Ok, I'm hoping someone can give me a hand as I'm out of ideas.

I have Novell's FTP server running on a 6.5sp6 Netware box.

If I unload ipflt on my border 3.9 box everything works fine.

With the filters only ACTIVE connections work. PASV connections the user
can login and at the PASV command the connection hangs, receives a blocking
call and disconnects after maybe a minute or two.

I've used the builtin BM filter ftp_port_pasv_st This has added not
only this exception in my filter list but two for DNS.

However it doesn't work.

What is the trick to getting incoming PASV ftp connections to work without
opening out ever port to my netware box.

Thank you