I've unchecked both "Allow anonymous access/uploads to ftp.example.com" options in cPanel's Anonymous FTP Controls. However, when you attempt to login to the server anonymously it takes you to a mysterious directory containing "mail" and "pub". "pub" is empty while "mail" has one empty "inbox" file, which you can download.
Is that supposed to happen? I'm running WHM 9.9.7 / cPanel 9.9.8-R5 / Fedora i686.
