PDA

View Full Version : Suspicious Process: spamd child



Gatto
09-04-2009, 06:38 PM
I am running CSF (Config Server Firewall) on my WHM/CPanel server. Now, everytime it seems that my server is rooting out SPAM, it sparks 2 emails:

lfd on server: Excessive resource usage &
lfd on server: Suspicious process running under user

Is there anyway to get the these emails to stop as clearly the process is only doing its job?

Thanks

Chris
09-04-2009, 06:44 PM
Hi Gatto,

The update to versio 4.35 removed the exclusion for this process, but it is simple to reinstate:

1. Log into Web Host manager (WHM)
2. Click on "ConfigServer Security & Firewall" on the left side of the page at the bottom
3. Click on "lfd Process Ignore" in the "lfd - Login Failure Daemon" section
4. Add the following line to the list:
cmd:spamd child
5. Click "Change"
6. Click "Restart lfd"

You're done!