mandatory local passive mode for ftp transfers

Many firewall setups (like mine) will prevent "active" ftp mode operations which require opening an additional tcp connection. I added a mandatory switch to passive mode, which probably should be the default.