vsftpd [ftp] FAIL DOWNLOAD:

Помогите решить следующую проблему. Сервак стоит за рутером с прямым ip.

При попытке слить файл юзером, который сидит за натом, в лог пишется такая хрень:

Tue Jun 24 01:10:46 2008 [pid 15288] CONNECT: Client "yy.yy.yy.yy"
Tue Jun 24 01:10:46 2008 [pid 15288] FTP response: Client "yy.yy.yy.yy", "220 Welcome to blah FTP service."
Tue Jun 24 01:10:47 2008 [pid 15288] FTP command: Client "yy.yy.yy.yy", "USER anonymous"
Tue Jun 24 01:10:47 2008 [pid 15288] [anonymous] FTP response: Client "yy.yy.yy.yy", "331 Please specify the password."
Tue Jun 24 01:10:47 2008 [pid 15288] [anonymous] FTP command: Client "yy.yy.yy.yy", "PASS <password>"
Tue Jun 24 01:10:47 2008 [pid 15288] [ftp] OK LOGIN: Client "yy.yy.yy.yy", anon password "yourname@yourcompany.com"
Tue Jun 24 01:10:47 2008 [pid 15288] [ftp] FTP response: Client "yy.yy.yy.yy", "230 Login successful."
Tue Jun 24 01:10:48 2008 [pid 15288] [ftp] FTP command: Client "yy.yy.yy.yy", "TYPE I"
Tue Jun 24 01:10:48 2008 [pid 15288] [ftp] FTP response: Client "yy.yy.yy.yy", "200 Switching to Binary mode."
Tue Jun 24 01:10:48 2008 [pid 15288] [ftp] FTP command: Client "yy.yy.yy.yy", "PASV"
Tue Jun 24 01:10:48 2008 [pid 15288] [ftp] FTP response: Client "yy.yy.yy.yy", "227 Entering Passive Mode (xx,xx,xx,xx,196,76)"
Tue Jun 24 01:10:49 2008 [pid 15288] [ftp] FTP command: Client "yy.yy.yy.yy", "RETR /pub/myfile.bin"
Tue Jun 24 01:10:50 2008 [pid 15288] [ftp] FTP response: Client "yy.yy.yy.yy", "150 Opening BINARY mode data connection for /pub/myfile.bin (702062592 bytes)."
Tue Jun 24 01:10:51 2008 [pid 15288] [ftp] FTP response: Client "yy.yy.yy.yy", "426 Failure writing network stream."
Tue Jun 24 01:10:51 2008 [pid 15288] [ftp] FAIL DOWNLOAD: Client "yy.yy.yy.yy", "/pub/myfile.bin", 0.00Kbyte/sec


Вот vsftpd.conf:

listen=YES
anonymous_enable=YES
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=NO
secure_chroot_dir=/var/run/vsftpd
pam_service_name=vsftpd
rsa_cert_file=/etc/ssl/certs/vsftpd.pem
anon_root=/mnt/files
pasv_enable=YES
pasv_address=xx.xx.xx.xx
pasv_min_port=50000
pasv_max_port=59999
use_sendfile=NO
log_ftp_protocol=YES

Порты 21, 50000-59999 на рутере проброшены, и с прямых ip всё льется нормально.