an option to allow passive connections for the firewalled user