did ur pix firewall was patched to lastest version? there is an attack against pix firewall
that is protecting FTP as u described. See the link bellow
http://www.cisco.com/warp/public/707/pixftp-pub.shtml
this flaw can open arbitrary ports at pix firewall