With flag "--passive-ftp" wget works in passive mode, where no firewall poking is needed.
To configure firewall to work seamlessy with ftp, you need to
Code:
modprobe ip_nat_ftp
modprobe ip_conntrack_ftp
and have both established and related packages to get back
(If you have done your configuration with some automated tool, it is done
that way).