hello,

you are not allowing public access nor authenticated access:


you should change the <public> element content to Y or (better) uncomment one or more <user> elements setting the desired user and password.