Hi, I've been working on getting our ftp proxy working, and with the help of
theiforum, I have it up and running.

However, using the proxy server has it's downsided (complicated syntax, does
not play nice with some apps). Pros include restricting access to desired

Craig (and others) have often mentioned using a simple stateful filter
exception to allow ftp traffic out rather than use the ftp proxy. I know
this works just fine. My only concern is still restricting access to
authorized persons. This is easy with the proxy using a rule or two, but
how can it be done by just using a stateful filter exception??

Thanks, Chris.