I was just going through the BFD rules directory
/usr/local/bfd/rules
and found that for exim the log processor is set to
LP="/var/log/exim_mainlog"
shouldn't that be
LP="/var/log/exim/mainlog"
Any ideas? I am not sure if BFD was ever checking the exim logs for brute force attacks
Also the rules for rh_pop3 and rh_imap are checking /var/log/messages file for processing? Shuldn't that be /var/log/maillog
Thanks in advance
/usr/local/bfd/rules
and found that for exim the log processor is set to
LP="/var/log/exim_mainlog"
shouldn't that be
LP="/var/log/exim/mainlog"
Any ideas? I am not sure if BFD was ever checking the exim logs for brute force attacks
Also the rules for rh_pop3 and rh_imap are checking /var/log/messages file for processing? Shuldn't that be /var/log/maillog
Thanks in advance