Try the less restrictive rule as given in the man page for ftp-proxy
Code:
pass in quick proto tcp to port ftp rdr-to 127.0.0.1 port 8021
Else use tcpdump to log the requests of the ftp-client behind the firewall on the internal interface, and on another console the ones on the external interface.