add rule inet filter input tcp dport 21 accept
add rule inet filter input tcp dport 40000-49999 accept