ftp clients with SuSEFirewall2

I am having an issue using ftp CLIENTS on my box. XP is fine but on SuSE
(9.3, 10.0 and 10.1) I sometimes have problems with some sites and the
issue seems to be with the SuSE supplied firewall.

I can log on OK and use cd but if I try to move data eg ls, get, put then I
get a message about extended passive mode and then a wait until time out.
If I disable the firewall then I have no problems. I see a message in logs
that the firewall is blocking between me and the host I am ftping.

Now in ftp client I can sometimes force usage by changing mode but in tools
like Quanta it's more of an issue.

Is there a simple fix to keep the firewall but allow ftp? What is it and
how do I implement it?

TIA