On Thu, Oct 07, 2010 at 12:26:16PM +0300, Patrick Okui wrote: > Again, as Mark suggested, start by removing the acl and also ensure > you have "ip nat inside" on the fast ethernet connected to your LAN. Also: when you've applied this sort of ACL, you'll probably need to set "passive mode" in any FTP client which connects to it.