IPchains question

[Brian Hand <bchand squashduck com>]

Hello, I am using the following two ipchains commands to setup ip
masquade on a 10.*.*.* network

/sbin/ipchains -P forward DENY
/sbin/ipchains -A forward -s 10.0.0.0/255.0.0.0 -j MASQ

every thing works fine except for active ftp sessions,  can anyone offer
the command you use to allow active ftp connections back in.  I realize
that passive does work, however I have many winblows and macincraps on the
private network and they are the ones I need to get working.

Thanks
Brian