I found this really good explanation of passive versus active FTP. This explains why it doesn't work through most firewalls. Of course there are modules for most firewalls to allow active FTP, but I don't really know why you'd want to. I don't see any reasons NOT to use passive FTP.