Hi there,
well it is a normal behaviour when you're using passive ftp.
I mean address sent to the client is inside the datagram as data.
I mean if you contact a server in passive mode server will respond with : here is my ip address and we can talk with this port.
That's why Synology has an option to propagate the WAN address not the local address for the FTP.
Now if you contact the server and server is responding : here is my WAN address and we can talk on this port, you have a firewall problem and it is depends of your router.
Some intelligent routers can open ports knowing that the source address has initiated a communication and in this case it is transparent but some others should have rules to explicitly open ports.


