SurferTim:
It is not a firewall problem.
In case it wasn't clear, I was referring to a user-controlled firewall at the ISP - not just at the router or client PC. I've seen two UK ISPs provide these as protection against inbound attacks, and they needed to be configured (via the ISP's portal) to allow inbound traffic on specific ports.