Suppress CSF LFD Warnings for a Specific Process


This article provides a guide to suppress CSF LFD warnings for a specific process. CSF/LFD notification emails are sent by the server when specific criteria are met, for the sake of alerting admins regarding potential security concerns on the server.

In some cases, it may be desirable to ignore specific notifications that may be safe, but due to the CSF configuration, trigger a warning (the subject line contains "Excessive Resource Usage").

Selectively Suppress CSF LFD Warnings

There are many guides out there that outline steps to suppress ALL CSF/LFD notification messages. This is not ideal for all scenarios. In fact, the notification system can be very helpful when CSF is appropriately configured.

However, sometimes, an admin may prefer to allocate additional resources to certain processes which exceed the limits set in CSF config. In this case, the process, will trigger the alert notification emails. For this specific process, we would prefer not to be notified.

Edit LFD Process Tracking Ignored Commands

In this guide, we will be modifying the /etc/csf/csf.pignore file. This file contains the list of executables (exe) and commands (cmd) that will be ignored by LFD process tracking.

Follow the steps below to setup suppression of CSF and LFD warnings for a specific process:

  1. First, login to the server as root user.
  2. Make a copy of the /etc/csf/csf.pignore file:
    cp /etc/csf/csf.pignore /etc/csf/csf.pignore.bak
  3. Next, edit the original file with your preferred text editor:
    nano /etc/csf/csf.pignore
  4. Once complete, exit and write changes to the /etc/csf/csf.pignore file.
  5. Restart CSF and LFD services to process the changes:
    csf -r

The CSF and LFD services will now restart using the updated /etc/csf/csf.pignore data.

Further Reading:

  • csf, lfd, notifications, configserver, firewall, configure error, waf
  • 1 Корисниците го најдоа ова како корисно
Дали Ви помогна овој одговор?

Related Articles

Remove a Service from ChkServd Monitoring for cPanel Servers

This guide requires root user account in server. In some circumstances, ChkservD cPanel...

Assigning a Dedicated IP Address to a Subdomain using WHM

To assign a dedicated IP address to a subdomain, perform the following steps: Step 1: Add the...

Enable Lets Encrypt AutoSSL Provider

This article refers to cPanel version 84 and later. Enable Let's Encrypt for AutoSSL Follow...

How to Fix Incorrect cPanel Account Quotas and Disk Usage

This article will provide a step-by-step guide to fix incorrect account quotas and disk usage on...

How to Uninstall Installatron in WHM cPanel Server

This guide will show you how to quickly uninstall Installatron software from WHM/cPanel server....