two thoughs as i came accross some problems by myself: 1) is ssl/tls enabled on the server? if so, the ip_conntrack_ftp will not be able to parse the network traffic 2) if you provide the ftp client logs (please do not c/p the real and username, password) chances might that the problem can be spotted faster