Not all servers work with passive mode. For active, the onus on keeping it working is on me -- and that's easy, it's a trivial bit of firewall config. (conntrac

Not all servers work with passive mode. For active, the onus on keeping it working is on me -- and that's easy, it's a trivial bit of firewall config. (conntrack_ftp)