Forum Linux.debian/ubuntu vsftpd : passive mode

Bonjour à tous,

j'ai installé vsftpd sur mon serveur hier,
et impossible de faire un ls une fois logge

530 Please login with USER and PASS.

530 Please login with USER and PASS.

KERBEROS_V4 rejected as an authentication type

Name (xxxxxx.org:xxxxxxx): toto

331 Please specify the password.

Password:

230 Login successful.

Remote system type is UNIX.

Using binary mode to transfer files.

ftp> ls

227 Entering Passive Mode (X,X,X,X,126,0)

ftp: connect: Connection refused

ftp>

ensuite si je fais un :

Passive mode off.

ftp> ls

200 PORT command successful. Consider using PASV.

425 Failed to establish connection.

qué passa ?

voici mon vsftpd.conf

listen=YES

anonymous_enable=NO

local_enable=YES

write_enable=YES

local_umask=022

anon_upload_enable=NO

anon_mkdir_write_enable=NO

dirmessage_enable=YES

xferlog_enable=YES

connect_from_port_20=YES

xferlog_file=/var/log/vsftpd.log

idle_session_timeout=600

data_connection_timeout=120

nopriv_user=ftp

async_abor_enable=NO

ascii_upload_enable=NO

ascii_download_enable=NO

ftpd_banner= Bienvenue sur le FTP de Galadalfos ...

chroot_local_user=YES

chroot_list_enable=YES

pam_service_name=vsftpd

rsa_cert_file=/etc/ssl/certs/vsftpd.pem

max_per_ip=2

max_clients=2

pasv_enable=YES

pasv_max_port=33333

pasv_min_port=30000

et pour IPTABLES :

iptables -A INPUT -p tcp --dport 20 -j ACCEPT

iptables -A INPUT -p tcp --dport 21 -j ACCEPT

iptables -A INPUT -p tcp --dport 30000:33333 -j ACCEPT

Je pense que cela vient d'iptables, parce que ca marche depuis mon reseau local, mais pas de l'exterieur.