Thursday, November 13, 2014

How to stop Suspicious process alert emails from CSF ( Configserver ) firewall

cpanel server owners gets following alert emails from lfd "Subject: Suspicious process running under user" .Its because of csf regularly scans the processes of server, if any process unknown to csf to considers this as suspicious. in such case you can check process on server and if it is genuine process then you can add this process under ignore list of csf.

you can add the precess in /etc/csf/csf.pignore file and restart csf and lfd service.

Also you can stop getting process alert emails from lfd by disabling below parameter in csf.conf file.

PT_LIMIT = 0

No comments:

Post a Comment