I just posted in another area of this forum ( http://forums.iis.net/p/1157128/1901692.aspx#1901692 ) but I think this is the right place to post judging by I have a similar problem. I have verified it is using the right ports and that the firewall is allowing those ports, internally passive mode works...

When I issue: quote pasv I get the internal ip address passed w/ the correct port range firewall is turned off. It seems like I should be able to set it to pass the external ip address somewhere like in IIS7 (iis7 firewall ip setting)