updated firewall rules for passive FTP