It's possible that the problem is NAT rather than firewalls. I've seen some situations which choke because the NAT can't figure out where to direct a certain port for more than one data stream. You can get one data stream going through a certain port into the NAT just fine, but try to do a second one and it dies.