my users are having problems accessing FTP sites, it is timing out when
they try to access those sites where they need to authenticate.

we have no problem from outside the firewall, I think it is only a matter
of open the appropiate ports, can anyone tell me what port(s) to open,
and also how the configurations would be for those ports in my IP
filtering forwarding?