Have an ftp server on our private network. Trying to get people
outside our network to connect to it w/ limited success, some can some
can't.

Have a static NAT entry for public ip to private ip. Have a filter
exception:

from public to private,
src ports - <all>
dest ports - 20-21
src addr - <any address>
dest addr - private addy of ftp server

Am I missing something?

Oh, addy to try from outside 69 DOT 145 DOT 186 DOT 10

TIA,

Stevo