[Solved] CSF/LFD Stop Emails containing “Suspicious process running under use X”

October 22, 2016

CSF really is an excellent IP Tables wrapper but these alerts can become a burden and you can essentially receive hundreds of them per day. Okay, for sure, the goal should be to fix the issues first but if you are a busy server admin, then this can take time so if you need to disable the emails, then just follow the steps below.

1. Edit the CSF config file

pico /etc/csf/csf.conf

2. Search for the following settings PT_USERMEM and PT_USERTIME and set them both to 0.

# This User Process Tracking option sends an alert if any cPanel user process
# exceeds the memory usage set (MB). To ignore specific processes or users use
# csf.pignore
# 
# Set to 0 to disable this feature
PT_USERMEM = "0"

# This User Process Tracking option sends an alert if any cPanel user process
# exceeds the time usage set (seconds). To ignore specific processes or users
# use csf.pignore
# 
# Set to 0 to disable this feature
PT_USERTIME = "0"

3. Restart CSf and LFD

csf -r

service lfd restart

The warning emails should stop coming now.

Tags: