lfd

Hi after last update of CSF I get this alert for many account every 10 minutes : lfd: Excessive resource usage: xxxxxx (5411) Time: Fri Sep 12 04:04:52 2008 +0200 Account: xxxxx Resource: Process Time Exceeded: 65734 > 1800 (seconds) Executable...

Hi. lfd is a module being part of the ConfigServer Firewall (CSF). From time to time, one of my boxes is overhelmed of concurrent processes (nightly upcp, backups, mailman archiving, logwatch, etc) and lfd stops with a memory error (cannot fork). Although Tailwatchd remains active. There is a...

Does anyone know if Chirpy's lfd will work if I syslog to a remote log server?

(Complete log file attached) Does anyone see a problem with this? I can't figure it out. Thanks, C. Scott Williams

Hello, For the past 4-5 days, LFD has been e-mailing me, saying nearly every file in /usr/bin/ and /usr/sbin /bin/ has failed the last MD5 last checksum. I did see in my back log of emails, the server is a small update, but I've gotten pages of files between all the emails so far. Here...

Hello, We get multiple lfd alerts, saying suspicious process running under user nobody. Executable: /usr/local/cpanel/bin/cpwrap Command Line (often faked in exploits): /usr/local/cpanel/bin/eximwrap GETDISKUSED SomeUser SomeDomain.Com Network connections by the process (if any): tcp...

lfd on one server has started killing processes left and right. Most emails look like the following: Time: Tue Sep 4 08:43:36 2007 Account: root Resource: Process Time Exceeded: 294156 > 1800 (seconds) Executable: /sbin/init Command Line: init PID: 1...

Main >> Server Status >> Service Status This shows that lfd failed Yet when i go to Main >> ConfigServer Security & Firewall - csf v2.79 It says Status of lfd:lfd (pid 11758) is running... Which one is correct? And what can I do? Thanks

Hi there everyone, I got a notice that the server load spiked through lfd. The problem is that I don't see the culprit in the report. The server load is .15 right now, which is actually about normal for it. These numbers are way off the chart comparatively. Any help would be appreciated:

We got this message from lfd and csf which was installed on oour server. We are not sure if its a legit process, can any experts out there please advise? Thank you. Time: Tue May 8 03:10:51 2007 PID: 10022 Account: bintanne Uptime: 98 seconds Executable...

My server get crashed :( Can anybody explain what is causing such high load? LOG ATTACHED thank you

Can somebody please tell me what this email means? I have two them, 3 hours apart, in my mail box now :confused: lfd: High 5 minute load average alert Time: Fri May 4 04:13:07 2007 1 Min Load Avg: 6.27 5 Min Load Avg: 6.00 15 Min Load Avg...

csf / lfd ,How keeps allow FTP process? Dear all: EX: In csf.deny : 163.XX.XX.XX # lfd: 163.XX.XX.XX found to have 471 connections - Fri Mar 16 15:41:51 2007 How keeps allow FTP process in lfd ? Let all users can be ignored by lfd in FTP more connections, not ignored by IP address...

WHM 11.0.0 cPanel 11.1-E381 REDHAT Enterprise 4 i686 - WHM X v3.1.0 Just noticed that the Security Center in WHM in the latest Edge build has a CPHulk brute force protection. I have CSF/LFD and it seems to protect the server very well against Brute Force attacks. In my case, is there...

Hello guys, My lfd service is sending me this email: --- On Mon Feb 19 15:32:16 2007, the Login Failure Daemon detected [email protected] logging into pop3d from 200.48.xx.xx (mail.anotherdomain.com.pe) 61 times within the last 1545 seconds. The maximum allowed login rate is 60/hour (3600...

Hi, I just received report from LFD like below : -------------------------------------- On Sat Feb 17 19:45:20 2007, the Login Failure Daemon detected 207.58.149.229 (transfer.cpanel11.com) generating 9 (mod_security) login failures within the last 230 seconds and was blocked. Log...

Hello, in Main >> Server Status >> Service Status i get the status of my services and i see that lfd - failed. Whats is LFD? What can i do to solve the problem? Thanks and merry Xmas! Whiteagle

getting this message once in awhile... lfd: Excessive resource usage: buster (19281) Time: Tue Dec 19 19:16:06 2006 Account: buster Resource: Process Time Exceeded: 1821 > 1800 (seconds) Executable: /usr/libexec/openssh/sftp-server Command Line...

how do i prevent CSF and LFD (from configserver.com) from auto-restarting? i want to turn them off once in a while, for extended periods of time on a not-so-related-note, does anyone know if CSF or LFD changes the SSH timeout period? I'm getting timed out on my SSH connections in much...

Is there something in csf / lfd that may cause occasional timeouts for visitors? I'm getting a few good complaints about that and not sure how to trace this as I'm not provided any info on clients end to trace the problem