vsftpd+firewall

[greengreen]

Hi,
how should I set firewall - ip_nat_ftp and ip_conntrack_ftp and maybe others module to use vsftpd with passive mod without hard open INPUT ports?
thanks a lot