http://forum.pfsense.org/index.php/topic,13343.0.html
http://forum.pfsense.org/index.php/topic,12173.0.html
http://support.microsoft.com/?scid=kb%3Ben-us%3B555022&x=13&y=12
Olha fiz isso e funcionou
a regra na lan pra porta 20, e segui o restante dos passos, o link de como se defini o range de portas no iis está ae, boa diversão hehe
Oh, BTW, Scott. To fix your active FTP issue, your FTP server should initiate all active FTP commands from port 20.
So if you add a rule that looks like this your specific FTP issue should be fixed:
LAN, Proto=TCP, Source=FTP-Server, Port=20, Destination=, Port=, Gateway=*
Oh, and Inbound Passive FTP works just fine if you follow the guide. This setup works just fine for me in multiple setups:
1. Disable FTP Helper on WAN interface(s)
2. Configure FTP server to use a narrow port range for passive connections (say 50000-50250)
3. Configure FTP server to specify external/NATted IP for passive connections
4. Configure pfSense to NAT ports 21 and 50000-50250 to the FTP server (can do a 1:1 mapping w/Proxy Arp IP if you wish, too)
5. Configure pfSense to allow access to ports 21 and 50000-50250 to the FTP server