LFD defaults for csf.pignore

Status
Not open for further replies.

NoBaloney2

NoBaloney Internet Svcs.
Joined
Jun 17, 2007
Messages
498
Location
California
I've decided I don't want the hundrds of email I get (almost continually) from LFD but I want it to keep running.

I've tried putting what I've often thoght right in csf.pignore, and I've even restarted lfd each time though I'm not sure it's necessary.

But I've not seen significant results.

Do you have something that works? If so, would you be kind enough to share your file with me? Or at least give me some ideas?

Thanks.

Jeff
 

Kiekeboe100

Verified User
Joined
Apr 19, 2008
Messages
143
Location
Belgium
Hi,

I've added the following lines:

Code:
exe:/usr/libexec/dovecot/pop3
exe:/usr/libexec/dovecot/imap
exe:/usr/local/libexec/dovecot/pop3
exe:/usr/local/libexec/dovecot/pop3-login
exe:/usr/local/libexec/dovecot/imap
exe:/usr/local/libexec/dovecot/imap-login
exe:/usr/local/bin/freshclam
Stijn
 

smtalk

Administrator
Staff member
Joined
Aug 22, 2006
Messages
9,074
Location
LT, EU
I'd recommend adding the following (executables from previous post included):
Code:
exe:/usr/libexec/dovecot/pop3
exe:/usr/libexec/dovecot/imap
exe:/usr/libexec/dovecot/lmtp
exe:/usr/local/libexec/dovecot/pop3
exe:/usr/local/libexec/dovecot/pop3-login
exe:/usr/local/libexec/dovecot/imap
exe:/usr/local/libexec/dovecot/imap-login
exe:/usr/libexec/dovecot/stats
exe:/usr/local/bin/freshclam
exe:/usr/libexec/dovecot/managesieve-login
exe:/usr/local/bin/clamd
exe:/usr/share/cagefs-skeleton/usr/selector/lsphp
exe:/usr/selector/lsphp
exe:/usr/local/bin/lsphp
pexe:/usr/local/php../bin/php_uploadscan\.sh
pexe:/opt/alt/php../usr/bin/php-cgi
pexe:/usr/local/php../sbin/php-fpm..
pexe:/usr/local/php../bin/php-cgi..
pexe:/usr/local/php../bin/php..
pexe:/opt/alt/php../usr/bin/lsphp
exe:/usr/sbin/pure-ftpd
exe:/usr/local/bin/pureftpd_uploadscan.sh
exe:/usr/selector/php
exe:/usr/selector/php-cli
exe:/usr/sbin/nginx
exe:/usr/sbin/proxyexec
exe:/usr/sbin/nrpe
pexe:/usr/local/safe-bin/fcgid..\.sh
exe:/sbin/rpcbind
exe:/sbin/rpc.statd
exe:/usr/sbin/rsyslogd
exe:/usr/sbin/atd
exe:/usr/bin/wget
exe:/usr/sbin/snmpd
exe:/usr/bin/memcached
exe:/bin/gzip
exe:/bin/tar
exe:/usr/bin/dbus-daemon
exe:/sbin/rpcbind
exe:/usr/lib/polkit-1/polkitd
exe:/usr/sbin/avahi-daemon
Jeff, I think the creator of CSF/LFD could add that by default, he just needs to get information about that :)
 
Last edited:

nobaloney

NoBaloney Internet Svcs - In Memoriam †
Joined
Jun 16, 2003
Messages
26,119
Location
California
Thanks to both of you; I'm sorry I didn't get back to you earlier but I've been very busy lately. These rules have cut my LFD report emails almost to a manageable level :).

Certainly to a low enough level so I can eventually figure out more on my own. :)

Jeff
 

dmacleo

Verified User
Joined
Jun 21, 2012
Messages
644
exe:/usr/local/php55/sbin/php-fpm55
Like Martynas also added, this one drove 80% of the warnings for me.
the PT_USERMEM max is 500mb in lfd and php-fpm can easily trigger that warning.
 

vivalafe

Verified User
Joined
Jul 17, 2005
Messages
41
Location
Santo Domingo
sorry i have this issue like you... but a little Noob Hear :)
where i should add these lines?
As alirezajalilii said, you have to add those lines to the csf.pignore file. In Centos it is located in /etc/csf/csf.pignore.
Hope still helping. Sorry for seeing you post so late.

Regards,

Isaias
 
Status
Not open for further replies.
Top