Ipfilter and FTP

[Dovli <dovli_(_at_)_edison_(_dot_)_ro>]

Hello!

I have a an OpenBSD box acting as a firewall and NAT server. Behind this

firewall I have a web server that is also a FTP server.  So I redirected

all the ports (21 + those needed for passive transfer) from the firewall

to the FTP server. The result is that I have an ipnat rules file with
over 5000 entries. Is there another way to do it?

The problem is that FTP does not function in passive mode from certain
locations and with certain FTP clients.
Can someone advise me of a better configuration given my situation
?( the FTP server is another machine behind the firewall)

Thank you very much for your assistance

Dovli