lfd Excessive resource usage squirrelmail

[sneader]

After upgrading to WHM 11.36, I'm getting email alerts regarding excessive resource usage with Squirrelmail, for example:

Resource: Virtual Memory Size
Exceeded: 231 > 200 (MB)
Executable: /usr/local/cpanel/3rdparty/php/53/bin/php-cgi
Command Line: /usr/local/cpanel/3rdparty/php/53/bin/php-cgi /usr/local/cpanel/base/3rdparty/squirrelmail/src/right_main.php

(in addition to right_main.php, we also see read_body.php, etc., so the php script name is not predictable)

I tried adding this to CSF, but it's not working:

# squirrelmail
pcmd:/usr/local/cpanel/3rdparty/php/53/bin/php-cgi /usr/local/cpanel/base/3rdparty/squirrelmail*

Can someone suggest the right syntax to whitelist Squirrelmail?

Thanks in advance!

- Scott

[Sergio]

You have to add the following line in csf.pignore:
exe:/usr/local/cpanel/3rdparty/php/53/bin/php-cgi

[sneader]

Hmmm... do I really want to start ignoring EVERYTHING related to /usr/local/cpanel/3rdparty/php/53/bin/php-cgi ??

That seems a bit dangerous, when all I want to do is whitelist squirrelmail?

[ForumAdmin]

You'd probably be better off with:

Code: Select all

pcmd:/usr/local/cpanel/3rdparty/php/53/bin/php-cgi\s/usr/local/cpanel/base/3rdparty/squirrelmail/.*

Then restart lfd.

[sneader]

Thanks Jonathan!! That is the push that I needed... very bad with regex, but I can take this example and use it in many ways. I appreciate your help and all your products and services!

- Scott