ConfigServer Firewall, alias CSF is a firewall configuration script created to provide better security for your server while giving you an easy to use, an advanced interface for managing your firewall settings. CSF also comes with a service called Login Failure Daemon or LFD which is a daemon process running on the server has CSF for security. LFD scans server logs files periodically for resent login failures and consider such attempts like “Brute Force Attacks” and also it notifies the corresponding users regarding the detected failures. Some people find these LFD alerts as an awkward disturbance. So as a part of this let’s see how can we disable these LFD alerts completely for specific users in the server.
1) SSH into the server as root.
# ssh root@IPaddress
2) Now you need to find out the uid of the particular user which you want to disable the LFD alerts off. For this, you have to enter the following command.
# grep -i username /etc/passwd
Or
id -u username
3) Inside the file /etc/csf you can see a file csf.uidignore, open it with your favorite text editor.
# vi /etc/csf/csf.uidignore
4) And simply add the uid of the user to it.
5) At last restart the services CSF and LFD to get reflected by the changes we made.
# /etc/init.d/csf restart
# /etc/init.d/lfd restart
# csf -r
Let’s do the same procedure via WHM also.
1) Login to the WHM of your server and search for CSF.
2) Now select CSF and scroll down to the bottom, where you can see an option LFD.
On LFD you can see an option Edit LFD ignore file. Select the file csf.uidignore from that dropdown list and click edit.
3) After clicking on edit it will display a file as shown below.
Now add the uid of the user which you wish to ignore the LFD alerts to that file.
Hence it is completed, now LFD will ignore all the LFD alerts for the specific user which you have disabled now.
- 0 Users Found This Useful
