LFD defaults for csf.pignore

Status
Not open for further replies.

NoBaloney2

NoBaloney Internet Svcs.
Joined
Jun 17, 2007
Messages
496
Location
California
I've decided I don't want the hundrds of email I get (almost continually) from LFD but I want it to keep running.

I've tried putting what I've often thoght right in csf.pignore, and I've even restarted lfd each time though I'm not sure it's necessary.

But I've not seen significant results.

Do you have something that works? If so, would you be kind enough to share your file with me? Or at least give me some ideas?

Thanks.

Jeff
 
Hi,

I've added the following lines:

Code:
exe:/usr/libexec/dovecot/pop3
exe:/usr/libexec/dovecot/imap
exe:/usr/local/libexec/dovecot/pop3
exe:/usr/local/libexec/dovecot/pop3-login
exe:/usr/local/libexec/dovecot/imap
exe:/usr/local/libexec/dovecot/imap-login
exe:/usr/local/bin/freshclam

Stijn
 
I'd recommend adding the following (executables from previous post included):
Code:
exe:/usr/libexec/dovecot/pop3
exe:/usr/libexec/dovecot/imap
exe:/usr/libexec/dovecot/lmtp
exe:/usr/local/libexec/dovecot/pop3
exe:/usr/local/libexec/dovecot/pop3-login
exe:/usr/local/libexec/dovecot/imap
exe:/usr/local/libexec/dovecot/imap-login
exe:/usr/libexec/dovecot/stats
exe:/usr/local/bin/freshclam
exe:/usr/libexec/dovecot/managesieve-login
exe:/usr/local/bin/clamd
exe:/usr/share/cagefs-skeleton/usr/selector/lsphp
exe:/usr/selector/lsphp
exe:/usr/local/bin/lsphp
pexe:/usr/local/php../bin/php_uploadscan\.sh
pexe:/opt/alt/php../usr/bin/php-cgi
pexe:/usr/local/php../sbin/php-fpm..
pexe:/usr/local/php../bin/php-cgi..
pexe:/usr/local/php../bin/php..
pexe:/opt/alt/php../usr/bin/lsphp
exe:/usr/sbin/pure-ftpd
exe:/usr/local/bin/pureftpd_uploadscan.sh
exe:/usr/selector/php
exe:/usr/selector/php-cli
exe:/usr/sbin/nginx
exe:/usr/sbin/proxyexec
exe:/usr/sbin/nrpe
pexe:/usr/local/safe-bin/fcgid..\.sh
exe:/sbin/rpcbind
exe:/sbin/rpc.statd
exe:/usr/sbin/rsyslogd
exe:/usr/sbin/atd
exe:/usr/bin/wget
exe:/usr/sbin/snmpd
exe:/usr/bin/memcached
exe:/bin/gzip
exe:/bin/tar
exe:/usr/bin/dbus-daemon
exe:/sbin/rpcbind
exe:/usr/lib/polkit-1/polkitd
exe:/usr/sbin/avahi-daemon

Jeff, I think the creator of CSF/LFD could add that by default, he just needs to get information about that :)
 
Last edited:
Thanks to both of you; I'm sorry I didn't get back to you earlier but I've been very busy lately. These rules have cut my LFD report emails almost to a manageable level :).

Certainly to a low enough level so I can eventually figure out more on my own. :)

Jeff
 
exe:/usr/local/php55/sbin/php-fpm55
Like Martynas also added, this one drove 80% of the warnings for me.
the PT_USERMEM max is 500mb in lfd and php-fpm can easily trigger that warning.
 
sorry i have this issue like you... but a little Noob Hear :)
where i should add these lines?

As alirezajalilii said, you have to add those lines to the csf.pignore file. In Centos it is located in /etc/csf/csf.pignore.
Hope still helping. Sorry for seeing you post so late.

Regards,

Isaias
 
Status
Not open for further replies.
Back
Top