pasv_enable=YES
pasv_max_port=10100
pasv_min_port=10000
port_enable=YES
pasv_address=192.168.1.111

-A INPUT -m state --state NEW -m tcp -p tcp --dport 20:21 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 10000:10100 -j ACCEPT