i've seen software like this before and in setting up the firewall for it, only connections from a particular ip address and port range are accepted.
one port is configured out, one in and one bi-directional

i don't think adp is that stupid, but i could be wrong. and no admin in his right mind would allow any ip to connect to these (upper) ports, knowing what they're used for.

i don't know, this just dosn't sound right to me.