just installed 3.8, applied patches according to Craig's list...can't get to
the ftp server running on bordermanager from an internet client.

I found an earlier post on here that said that the only filter needed was
an ftp-port-passv-st on the public interface...which was already put there
by the install for the ftp proxy.

source: public
destination: all
packet type: ftp-port-passv-st
protocol: tcp
source port: all
destination port: 21
src address type: host, public ip address
destination address type: any.

doesn't work.

I also tried the static filters described in TID 2936874, and that didn't
work, either

unloading the filters allows access. ftp server works fine.