G'day Mike,
I'm not far from being a newbie myself but I think I can answer this one.
As an added security measure, you can only FTP into a user account using account name and password. From there you can navigate to the ibay of your choice. Ibays are designed for sharing so they are less secure (by definition).
I use WSFTP both internally and across the web from work and this works for me.
You can download from an ibay if you point a browser at:
ftp;//ibayname:ibaypassword@externalIP
but there are only read permissions (not write or execute). See if this gets you out of trouble.
Cheers,
Andrew.