a-allow-download-from-incoming-dir
You should only set the a-allow-download-from-incoming-dir option
to yes if you are absolutely sure what you're doing; otherwise
leave it at the factory default of no.
Enabling this option lets people both download and upload from the incoming
directory. This is generally a bad thing because remote users can
drop off pirated software or pornographic material for others to download.
Examples:
a-allow-download-from-incoming-dir=no
a-allow-download-from-incoming-dir=yes
Recommendation:
a-allow-download-from-incoming-dir=no