We set all of the FTP clients to passive mode by default.  Or at least that's

the intention.

--- krb5-1.2.1/src/appl/gssftp/ftp/main.c.passive	Thu Jun 29 22:27:07 2000

+++ krb5-1.2.1/src/appl/gssftp/ftp/main.c	Wed Aug 16 13:15:08 2000

@@ -178,7 +178,7 @@

 	cpend = 0;	/* no pending replies */

 	proxy = 0;	/* proxy not active */

 #ifndef NO_PASSIVE_MODE

-	passivemode = 0; /* passive mode not active */

+	passivemode = 1; /* passive mode active by default */

 #endif

 	crflag = 1;	/* strip c.r. on ascii gets */

 	sendport = -1;	/* not using ports */

--- krb5-1.2.1/src/appl/gssftp/ftp/ftp.M.passive	Wed Aug 16 13:15:26 2000

+++ krb5-1.2.1/src/appl/gssftp/ftp/ftp.M	Wed Aug 16 13:17:19 2000

@@ -619,10 +619,11 @@

 will forward a copy of the user's Kerberos tickets to the remote host.

 .TP

 .B passive

-Toggle passive data transfer mode.  In passive mode, the client initiates

-the data connection by listening on the data port.  Passive mode may

-be necessary for operation from behind firewalls which do not permit

-incoming connections.

+Toggle passive data transfer mode off.  In passive mode, the client initiates

+the data connection by connecting to the data port.  Passive mode is

+often necessary for operation from behind firewalls which do not permit

+incoming connections, but may need to be disabled if you connect to an

+FTP server which does not support passive operation.

 .TP

 .B private

 Set the protection level on data transfers to ``private''.  Data