According to
http://www.yougetsignal.com/tools/open-ports/ the port we've presently got the Apex on is open.
I just read something on a tech forum about Telus blocking specific packet types. Being that the Apex has an integrated webserver, that may be the issue. Telus only allows the running of webservers on their commercial plans, so it may be the packets themselves that are being blocked.