I need to have an FTP server that can work with both port and passive
mode. I know you can't do this with a NAT address and can't have a
public IP inside BM without using static NAT.

So I tried running NWFTPD on the BM server, binding it to a secondary
addr. I have non-stateful exceptions for port 20 and 21 open with
secondary adrs as destination. It works OK until the client switches
to PASSV then it hangs.

What's the best way to get this working?
I have BM 3.8sp2 on NW 6.5 sp2