FTP logs should be written to /var/log/pure-ftp/connection.log or similar
At the moment they only get written to /var/log/messages
, which isn't that logical as there's also a /var/log/pure-ftpd/
directory, where you'd expect to find them.
Also, we shouldn't be logging the RDNS for connections without the IP where at all possible, as it's trivial to fake.