Looks like your NAT isn't substituting the local ip in the PORT command with your external ip.

By the way, your NAT is already doing the ip translation for PASV command, otherwise, PASSIVE mode would not have worked as well.