symlinks to shares shown as files to anonymous ftp

My server has FTP on with anonymous access allowed and the scheme set to FTP Root and Share Points. There are several shares, some with access for Everyone set to None, others with Read/Write or Write, and FTPRoot contains nothing but the links to these shares.

When FTP’ing in as one of the users, the shares that this user has read persmission for are shown as directories and the rest are not shown, all as normal. When logging in as anonymous, however, some of the shares the ftp user doesn’t have read permission are shown as files. Trying to download those files will get permission denied.

Example using cmd-line ftp, what an priveledged user sees:

502 ‘EPSV’: command not understood.
227 Entering Passive Mode (192,168,0,2,251,32)
150 Opening ASCII mode data connection for directory listing.
total 88
drwxrwxr-x 12 root admin 408 Feb 27 23:41 .
drwxrwxr-x 6 root admin 204 Jan 18 08:43 ..
-rw-rw-r– 1 aaaserver admin 6148 Feb 24 19:56 .DS_Store
drwxrwx— 1 root admin 238 Jan 20 07:08 AAA_Internal
drwxr-xr-x 1 root admin 306 Jan 28 15:29 Software
drwxr-x— 1 root admin 170 Feb 18 08:29 Test
drwxrwxrwx 1 root admin 204 Jan 28 15:29 Unsecure_Drop
drwxrwx-wx 1 root admin 68 Jan 19 08:15 Uploads
drwxr-x–x 1 root admin 1054 Jan 26 09:10 VIP
drwxr-x–x 1 root admin 238 Jan 18 16:50 Vendors
drwx-wx-wx 1 root admin 272 Jan 20 14:54 incoming
drwxrwx-wx 1 root admin 68 Jan 20 14:54 online_order
226 Transfer complete.

what an underpriveledged user sees:

502 ‘EPSV’: command not understood.
227 Entering Passive Mode (192,168,0,2,5,63)
150 Opening ASCII mode data connection for directory listing.
total 72
drwxr-xr-x 1 root admin 204 Jan 28 15:29 Software
drwxrwxrwx 1 root admin 204 Jan 28 15:29 Unsecure_Drop
drwxr-x–x 1 root admin 1054 Jan 26 09:10 VIP
226 Transfer complete.

what anonymous ftp sees:

502 ‘EPSV’: command not understood.
227 Entering Passive Mode (192,168,0,2,6,42)
150 Opening ASCII mode data connection for directory listing.
total 72
lrwxr-xr-x 1 0 80 32 Jan 20 07:08 AAA_Internal -> ???
drwxr-xr-x 1 0 80 204 Jan 28 15:29 Software
lrwxr-xr-x 1 0 80 30 Feb 18 08:29 Test -> ???
drwxrwxrwx 1 0 80 204 Jan 28 15:29 Unsecure_Drop
lrwxr-xr-x 1 0 80 24 Jan 26 09:10 VIP -> ???
lrwxr-xr-x 1 0 80 28 Jan 18 16:50 Vendors -> ???
226 Transfer complete.

These shares that do get hidden are those with ‘other’ permission ‘-wx’ , the ones shown as files (links really) have ‘—‘ or ‘–x’.

Does anyone know why these sym links to some of the shares aren’t being hidden?

Thanks
-smallduck