Windows XP – Fixing Built-in Firewall Blocking Packets Despite Exceptions

I have configured my built-in Windows Firewall (Windows XP SP3) to allow this box to serve as a local FTP server (FileZilla server). The configuration was working until <insert some recent date>.

Specifically, I had configured these exceptions on the Windows Firewall -> Exceptions tab:

File Transfer Program (C:\WINDOWS\system32\ftp.exe) scope of "Any computer"

FileZilla (C:\Program Files\FileZilla\FileZilla.exe) scope of "My network (subnet) only"

ftp-data01 (Port number: TCP 2001) scope of "My network (subnet) only"
  . . . similar rules down to port 2010

As mentioned, this configuration was working until recently. If I look at the Windows Firewall Security Logging, I can see that the TCP SYN packets from my client to this server's port 21 are being dropped.

How should I configure Windows Firewall to allow the packets?

One solution that works is to use the "Advanced" tab -> "Local Area Connection" settings and enable "FTP Server", but the dialog box states that opens the exception for Internet access. I am looking for a solution that allows access for only the local subnet.