Finally!!!! I've finally managed to set up the appropriate IP packet filters to allow inbound FTP access on an ISA firewall. My word it is not intuitive. Anyway, for future reference here they are.