check out http://clarkconnect.org (RH9 working as firewall/router)

the thing is that there is not really listening something on the lan,
as far as there will be no data transfer via PASV.
but you have to forward some ports to get PASV trandfers working from the internet into the box and vice versa.

can someone find out wich ports i am using and use this knowledge against me?