Joximu, thanks for the response, now I know how to debug the proftpd
here is the full output, at the bottom is the connection attempt:
ns1:/home/bruno# proftpd -n -d 5
- mod_ctrls/0.9.4: binding ctrls socket to '/var/run/proftpd/proftpd.sock'
- parsing '/etc/proftpd/proftpd.conf' configuration
- parsing '/etc/proftpd/modules.conf' configuration
- mod_tls/2.1.1: using OpenSSL 0.9.8c 05 Sep 2006
- DenyFilter: compiling deny regex '\*.*/'
- disabling runtime support for IPv6 connections
- <Directory /*>: deferring resolution of path
- PathDenyFilter: compiling deny regex '.quota$'
- <IfModule>: using 'mod_delay.c' section at line 84
ns1.domain.com -
ns1.domain.com - Config for domain.com:
ns1.domain.com - Limit
ns1.domain.com - IgnoreHidden
ns1.domain.com - /*
ns1.domain.com - Umask
ns1.domain.com - DirUmask
ns1.domain.com - AllowOverwrite
ns1.domain.com - HideNoAccess
ns1.domain.com - ShowSymlinks
ns1.domain.com - AllowStoreRestart
ns1.domain.com - AllowForeignAddress
ns1.domain.com - DisplayLogin
ns1.domain.com - DisplayFirstChdir
ns1.domain.com - DenyFilter
ns1.domain.com - SQLAuthTypes
ns1.domain.com - SQLAuthenticate
ns1.domain.com - SQLConnectInfo
ns1.domain.com - SQLMinID
ns1.domain.com - SQLNamedQuery_get-quota-limit
ns1.domain.com - SQLNamedQuery_get-quota-tally
ns1.domain.com - SQLNamedQuery_update-quota-tally
ns1.domain.com - SQLNamedQuery_insert-quota-tally
ns1.domain.com - RootLogin
ns1.domain.com - TransferLog
ns1.domain.com - PathDenyFilter
ns1.domain.com - DeferWelcome
ns1.domain.com - ShowSymlinks
ns1.domain.com - DefaultServer
ns1.domain.com - ShowSymlinks
ns1.domain.com - AllowOverwrite
ns1.domain.com - IdentLookups
ns1.domain.com - AllowStoreRestart
ns1.domain.com - AllowForeignAddress
ns1.domain.com - TimeoutNoTransfer
ns1.domain.com - TimeoutStalled
ns1.domain.com - TimeoutIdle
ns1.domain.com - DisplayLogin
ns1.domain.com - DisplayFirstChdir
ns1.domain.com - DenyFilter
ns1.domain.com - DefaultRoot
ns1.domain.com - UserID
ns1.domain.com - UserName
ns1.domain.com - GroupID
ns1.domain.com - GroupName
ns1.domain.com - DelayEngine
ns1.domain.com - SQLBackend
ns1.domain.com - SQLAuthTypes
ns1.domain.com - SQLAuthenticate
ns1.domain.com - SQLConnectInfo
ns1.domain.com - SQLUserTable
ns1.domain.com - SQLUsernameField
ns1.domain.com - SQLPasswordField
ns1.domain.com - SQLUidField
ns1.domain.com - SQLGidField
ns1.domain.com - SQLHomedirField
ns1.domain.com - SQLShellField
ns1.domain.com - SQLGroupTable
ns1.domain.com - SQLGroupnameField
ns1.domain.com - SQLGroupGIDField
ns1.domain.com - SQLGroupMembersField
ns1.domain.com - SQLMinID
ns1.domain.com - QuotaEngine
ns1.domain.com - QuotaShowQuotas
ns1.domain.com - QuotaDisplayUnits
ns1.domain.com - SQLNamedQuery_get-quota-limit
ns1.domain.com - SQLNamedQuery_get-quota-tally
ns1.domain.com - SQLNamedQuery_update-quota-tally
ns1.domain.com - SQLNamedQuery_insert-quota-tally
ns1.domain.com - QuotaLock
ns1.domain.com - QuotaLimitTable
ns1.domain.com - QuotaTallyTable
ns1.domain.com - RootLogin
ns1.domain.com - TransferLog
ns1.domain.com - ExtendedLog
ns1.domain.com - PathDenyFilter
ns1.domain.com - mod_ctrls/0.9.4: binding ctrls socket to '/var/run/proftpd/proftpd.sock'
ns1.domain.com - ProFTPD 1.3.0 (stable) (built Tue Jan 2 11:22:35 UTC 2007) standalone mode STARTUP
ns1.domain.com (xxx.xx.xxx.xxx[xxx.xx.xxx.xxx]) - FTP session requested from unknown class
ns1.domain.com (xxx.xx.xxx.xxx[xxx.xx.xxx.xxx]) - FTP session closed.