The real problem is not people behind firewalls, but people who force an INTERNAL IP address (like 192.168.x.x or 10.x.x.x, you know, the ones that show up in red). I'm behind a firewall and have people download files from me all the time. Traffic passing through a firewall usually gets sent out using the firewall's address, and hence is accessible to others.