Unless you're sure what you're doing, leave allow-pasv set to yes. Otherwise you risk alienating a lot of users who must use PASV to access FTP sites. Users should have the option of using either active or passive FTP, unless your site has some sort of limitation.
Examples: