> rdr bge0 1.2.3.4/32 port ftp -> 1.2.3.4 port ftp tcp proxy ftp Sorry, I don't get that. Could you explain how it works? Is that 1.2.3.4 supposed to be the IP of my FTP server? On both sides? Shouldn't the rule involve the ftp-data port?