Cpanel 11: cPHulk Brute Force Protection

[RaZor Edge]

Hi,

Cpanel 11 introduce a new feature called "cPHulk Brute Force Protection":

cPHulk Brute Force Protection
cPanel 11 marks the debut for the much anticipated cPHulk Protection system. cPHulk protects your vital services by disabling authentication to those services after a brute force attack is detected. It protects: cPanel, WHM, SSH, FTP, IMAP, and POP3 from brute force authentication attacks. cPHulk will remain transparent to the attacker whose authentication attempts will feel normal, even while authentication is disabled. Thus, you can get substantial information about the attack. You can even customize authentication thresholds and lock out times!

http://www.cpanel.net/products/cPane...1/security.htm

If I enable this feature on my VPS, is it ok to assume that I can safely uninstall "BFD (Brute Force Detection) "?

These two seems to do the same job!

[thisisit3]

BFD does a lot more than that, since the BFD rules detect Apache exploits, open relay tests in exim and a lot of other kinds of attacks. Its much more than just a "login failed" detection.

I've enabled cPHulk but so far it hasn't made any bans, maybe because BFD is more sensitive.