diff --git a/config/net/upstream.nix b/config/net/upstream.nix
index 5af63d1..c170486 100644
--- a/config/net/upstream.nix
+++ b/config/net/upstream.nix
@@ -285,6 +285,12 @@ in
           reflect = false;
           sourcePort = 2269;
         }
+        {
+          destination = servHosts.ftp;
+          proto = "tcp";
+          reflect = true;
+          sourcePort = 1022;
+        }
       ];
       interfaces = {
         core = {