[Proftpd-user] ban all but anonymous?

Last month I started a thread about setting up ban so that it stays on 
over a restart.  That has been working well to remove intrusion attempts 
from the log files.  However, I find that there are an awful lot of user 
names generated by the script kiddies so I keep having to add more to 
the ban list.

The server in question only allows anonymous logins, and only downloads. 
  For the sake of argument, if it also allowed "realuser" there appears 
to be no way to  implement (apache sort of syntax):

order allow,deny
allow anonymous,realuser
deny  *

with the ban module.  Am I missing something and this is indeed 
possible?  If not, any chance it could be added?
Alternatively, BanOnEvent could do it, but it is missing the needed 
event:

UserNotAllowed

which would trigger in the above scenario for a user other than 
anonymous or realuser.  Using BanOnEvent would
emit one message to the log files on the single failed attempt (let's 
say with "admin") and would then silently block all further "admin" 
logins.

Thanks,

David Mathog
[email protected]
Manager, Sequence Analysis Facility, Biology Division, Caltech


_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html