Firewall/NAT

I do have an FTP server behind a Monowall firewall, the FTP Server is on the LAN Network, the FTP Client should access the ftp server from internet, pointing to the public static ip address, the connection work fine up to the succesfully end of the logon process, then when the FTP Server enter into "PASV mode" the ip address that arrive to the ftp client is the LAN (private) FTP IP address, not the Public IP address of the monowall wan interface.
 
I configured a NAT Inbound (PAT) for port 21 mapped to the internal IP address of the FTP Server, and a second PAT in the range of the "ephemeral ports"
(49152 - 65535) again mapped to the internal ip address of the FTP Server.

Are there anybody that could help me ?
 
Best regards                     Luciano Perenzin
             

your FTP server should have a place to configure your servers public IP and the passive port range to use.   Also,  I would narrow the port range to something like 50200-50215.  If you have lots of concurrent connections you will need to increase that range.

CS...