Suspicious "spamd child" Process Emails From CSF Firewall Software

If you have a dedicated server or VPS with the Config Server Firewall (CSF) software installed (any dedicated or VPS managed by us has this software installed by default) and are receiving a number of "suspicious process" emails that mention the "spamd child" process, this is the result of a recent update to the CSF software.  The 4.35 version of CSF removed the exclusion it had for the "spamd child" process (this is the spam filter process), so whenever the spamd process is doing a lot of work CSF will identify it as a "suspicious process".  This can be avoided by adding the exclusion back into CSF.  Here's how:

1.  Log into Web Host manager (WHM)

2.  Click on "ConfigServer Security & Firewall" on the left side of the page at the bottom

3.  Click on "csf.pignore - Process Tracking" in the "lfd - Login Failure Daemon" section

4.  Add the following line to the list and click "Change":

cmd:spamd child

5.  Click the "Restart lfd" button

You're done!  You should no longer receive emails regarding the "spamd child" process.

  • 0 Kunder som kunne bruge dette svar
Hjalp dette svar dig?

Relaterede artikler

Block countries using the CSF Firewall

There are two main ways to block a user from accessing a website. You can use mod_geoip, which is...

How can I activate or deactivate webmail clients on my cPanel server?

You can activate or deactivate specific webmail clients on your Cpanel based server by browsing...

Does Fast Way Web allow IRC?

Fast Way Web does not support or allow IRC on dedicated servers, VPS services, Cloud, or shared...

How can i find which files & directories are taking up the most disk space?

  This can be very helpful to know, for various reasons. You will need to be logged into your...