<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Linux Sysadmin Blog &#187; firewall</title>
	<atom:link href="http://linuxsysadminblog.com/category/firewall/feed/" rel="self" type="application/rss+xml" />
	<link>http://linuxsysadminblog.com</link>
	<description></description>
	<lastBuildDate>Mon, 30 Apr 2012 12:34:45 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
		<item>
		<title>CSF Not Detecting POP3 Login Failures</title>
		<link>http://linuxsysadminblog.com/2009/05/csf-not-detecting-pop3-login-failures/</link>
		<comments>http://linuxsysadminblog.com/2009/05/csf-not-detecting-pop3-login-failures/#comments</comments>
		<pubDate>Thu, 07 May 2009 09:22:56 +0000</pubDate>
		<dc:creator>gerold</dc:creator>
				<category><![CDATA[cpanel]]></category>
		<category><![CDATA[firewall]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[csf]]></category>

		<guid isPermaLink="false">http://linuxsysadminblog.com/?p=612</guid>
		<description><![CDATA[This is the second time that CSF on our Cpanel server is not detecting POP3 login failures from a dictionary attack. The IP address was added on the ip deny list but still it was able to attempt to login on POP3. We have our LF_POP3D set to 20 and LF_POP3D_PERM to 1 to block [...]]]></description>
			<content:encoded><![CDATA[<p>This is the second time that <a href="http://configserver.com/cp/csf.html">CSF</a> on our Cpanel server is not detecting POP3 login failures from a dictionary attack.  The IP address was added on the ip deny list but still it was able to attempt to login on POP3.  We have our LF_POP3D set to 20 and LF_POP3D_PERM to 1 to block the ip permanently after 20 tries.  I can&#8217;t remember the CSF version when this first happened, but this time we&#8217;re running CSF version 4.65 and the latest is 4.67.  Of course, the usual way for me to fix the issue is to upgrade to the latest version.</p>
]]></content:encoded>
			<wfw:commentRss>http://linuxsysadminblog.com/2009/05/csf-not-detecting-pop3-login-failures/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

