> 230-Hello, you are logged into ftp.rsasecurity.com.  
>  
>    All login activity is monitored. 

Ok problem found: some lines don't have the required 
230- prefix
I will implement a hack to handle that!