Sorry to reply to my own post, but for anyone else who come across this, it looks like the easiest thing to do is to just add the max_ranges directive inside the location block containing the XSendFile alias - so in my case, I made the location that the free.php script uses different from the other scripts and bam - success.

Thanks for all your Help Maxim!