My new BM server at the moment has only one filter for outbound FTP on port
21 and it's not stateful, and FTP doesn't work. (It probably got that way
because we brought over filters from our old BM server.)

I want to be able to access FTP sites by pointing a browser to an ftp://
address or using FTP from a dos box. FTP currently does not work with the
filters loaded, but I created this filter:

Source = PRIVATE
Packet = ftp-port-pasv-st
All addresses both ways.

Is this an OK thing to do, and ought it to be tighter somehow? I tried it
and it appears to work just fine.

Thanks in advance.