> > Looks like a firewall issue. It can't open the data connection.
>
> For a passive connection? I don't think the firewall can get much
> wrong there - unless you have a broken ftp proxy active in your
> firewall.

<cough>

Yes, I was thinking it *might* be a broken ftp proxy.  Under 
ipnat.conf it says...

map rtk0 192.168.1.0/24 -> 0/32 proxy port ftp ftp/tcp

But, don't know whether broken ftp proxy is science fiction or fact :)
  

-- 
Richard