[Proftpd-user] AWS ELB problem

I'm trying to set up ProFTPD with a load balancer (either NLB or Classic LB) in AWS.  I have a server set up and working by itself with ProFTPD Version 1.3.5e.

I have an NLB and a Classic LB both set up with that server as a target.

The configuration has the server's private IP address as the MasqueradeAddress, which is accessible to the clients that are attempting to connect (that IP address works fine if I connect directly to it rather than to the LB).

I am able to connect to either load balancer and then list files and change directories.  When I try to transfer files (upload or download), the transfer never starts and the control connection eventually times out.  I see some commands in the log, but I do not see any STOR or RETR commands there.  Nothing is logged related to the transfer except:
            "TYPE I" 200 -
"PASV" 227 -

See below for the contents of the config file.  What am I missing?  How can I troubleshoot further?

Thanks,

Chris Edwards
Systems Engineer

Proftpd.conf:

TraceLog                                  /var/log/proftpd/trace.log
Trace                                        DEFAULT:1

ServerName                              "Test AWS ProFTPD server"
ServerIdent                               on "FTP Server ready."
ServerAdmin                             root@localhost
DefaultServer                            on

UseReverseDNS                                   off

User                                         nobody
Group                                       nobody

MaxInstances                            30

UseSendfile                              off

LogFormat                                default  "%h %l %u %t \"%r\" %s %b"
LogFormat                                auth      "%v [%P] %h %t \"%r\" %s"

LoadModule mod_ctrls_admin.c

LoadModule mod_vroot.c

ModuleControlsACLs                 insmod,rmmod allow user root
ModuleControlsACLs                 lsmod allow user *

ControlsEngine                         on
ControlsACLs                            all allow user root
ControlsSocketACL                   allow user *
ControlsLog                              /var/log/proftpd/controls.log

<IfModule mod_ctrls_admin.c>
  AdminControlsEngine              on
  AdminControlsACLs                all allow user root
</IfModule>

<IfModule mod_vroot.c>
  VRootEngine                           on
</IfModule>

<IfDefine TLS>
  TLSEngine                              on
  TLSRequired                           on
  TLSRSACertificateFile              /etc/pki/tls/certs/proftpd.pem
  TLSRSACertificateKeyFile        /etc/pki/tls/certs/proftpd.pem
  TLSCipherSuite                        ALL:!ADH:!DES
  TLSOptions                             NoCertRequest
  TLSVerifyClient                        off
  #TLSRenegotiate                     ctrl 3600 data 512000 required off timeout 300
  TLSLog                                   /var/log/proftpd/tls.log
  <IfModule mod_tls_shmcache.c>
    TLSSessionCache                 shm:/file=/var/run/proftpd/sesscache
  </IfModule>
</IfDefine>

  RequireValidShell off

  Umask                                                002 002

  PassivePorts 50000 50500
  MasqueradeAddress 10.26.72.117
  AllowStoreRestart on
  AllowRetrieveRestart on
  TimeoutNoTransfer 65535
  TimeoutIdle 65535
  ListOptions "-la"

  AllowForeignAddress on

  ExtendedLog /var/log/ftp.log ALL
  SyslogLevel Notice

  DefaultRoot /bnwqa bnwqa
  DefaultRoot /bnwuat

  AllowOverwrite                         yes
  <Limit ALL SITE_CHMOD>
    AllowAll
  </Limit>




The information contained in this email message, including any attachments, is intended solely for use by the individual or entity named above and may be confidential. If the reader of this message is not the intended recipient, you are hereby notified that you must not read, use, disclose, distribute or copy any part of this communication. If you have received this communication in error, please immediately notify me by email and destroy the original message, including any attachments. Thank you. **hibu IT Code:1414593000000**

_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html