disable Excessive resource usage notifications

[whmdesign]

hello

i use whm/cpanel , also last weeks i receive lot of amil notification like :
lfd on servers.site.com: Excessive resource usage: host (24147 (Parent PID:1817))

Time: Wed Feb 26 18:48:07 2020 +0100
Account: host
Resource: RSS Memory Size
Exceeded: 331 > 256 (MB)
Executable: /opt/cpanel/ea-php72/root/usr/sbin/php-fpm
Command Line: php-fpm: pool host_us
PID: 24147 (Parent PID:1817)
Killed: No

also i contacted the cpanel support and we disabled it using :
2) Open the CSF Firewall configuration

PT_USERMEM = 0

PT_USERTIME = 0
and then restarted the CSF and LFD afterwards

but we still receive lot of emails for Excessive resource usage

also the cpanel support told us to contact you for this to be fixed

how can we fix this please ?

thanks
Lahmar

[chadreitsma]

This is also happening to me. I have even set PT_USERMEM above what LFD is reporting and I still receive false positive emails. How can we fix this?

[Sergio]

This could be fixed adding the following line:

exe:/opt/cpanel/ea-php72/root/usr/sbin/php-fpm

to your csf.pignore

To do that, enter into ConfigServer Security & Firewall, then go to section:
lfd - Login Failure Daemon

In there open the option:
csf.pignore, Process Tracking

In there you will see a lot of lines that tells CSF what to ignore and the line that I wrote could be added in there, chances are that there should be one very alike but for other php versions.

You should be careful about the syntax notation as is stated on the help section.