🚀 go-pugleaf

I'd recommend that you ftp to cert.org -- they have a checklist for
anonymous ftp and, since they're running their own anonymous ftp
and are a likely target for crackers, it contains some good advice.
Unfortunately, I can't locate my own copy right now, otherwise I'd
include it here.  But, I'd take a look at what they have to say.

Well, as long as I'm typing, another thing I'd recommend is to use
a non-stock ftpd that does better logging and access control.  We're
using the one from wuarchive.wustl.edu, which logs transfers and
many other items (configurable) and also uses an access-control file
that will allow you to disable ftp based on load, time of day, point
of origin, etc.  You might want to take a look at that as well.

Good luck,
John Wack