It;s possible to make FTP server behind firewall to connect to any IP and TCP port in internal network, since PORT command with internal adress doesn't processed correctly.
vulners.com/securityvulns/securityvulns:doc:2777