you should change it to wherever your ftpd logs authentication failures
if not sure, do a failed ftp access, and see where it logs
Search found 2 matches
- 15 Oct 2013, 21:28
- Forum: General Discussion (csf)
- Topic: CSF not blocking mass FTP attacks
- Replies: 1
- Views: 2451
- 11 Oct 2013, 09:53
- Forum: General Discussion (csf)
- Topic: Suspicious process running under user postfix
- Replies: 1
- Views: 6266
Re: Suspicious process running under user postfix
if you're running postfix on this system, then, you can ignore it I run postfix, and, I have in my ignore this: grep postfix csf.pignore exe:/usr/libexec/postfix/smtp exe:/usr/libexec/postfix/smtpd exe:/usr/libexec/postfix/pickup exe:/usr/libexec/postfix/tlsmgr exe:/usr/libexec/postfix/qmgr exe:/usr...