The problem is that proftpd advertises an internal IP address of 172 .... so the client cannot connect to it.
You can solve this problem by installing (in the proftpd.conf file)
MasqueradeAddress externalIP
or by running conatiner using:
docker run --net=host .....
This option uses the host's IP network so passive mode works fine.
source share