I am setting up a ftp server with proftpd. No anonymous is allowed to connect to the ftp. I do the setting as follow

1) I have setup a group called ftpusers, all ftp users are added to that group.

2) I deleted everything about Anonymous tag in the configuration file to limit anonymous' login

3) For restricting the users in their home directory, I set

So far, everything is all right. I can only allow authorized users to login the ftp server and restrict them in their home directory. However, I wonder why other users who are not in ftpuser group can also login the ftp. Moreover, the user can move to the parent directory.

How can I forbid the user not in ftpuser group to login the ftp server?

Thanks in advance.