I figured it out myself after hours of Parallels support telling me it had nothing to do with Plesk or the server and blaming me for external firewall issues. I did need to put the PassivePorts in the <Global> section and I also needed to put MasqueradeAddres before the <Global> section, now...