Page 1 of 1
cPanel root access alert exception
Posted: 16 Apr 2017, 21:33
by cglmicro
Hi to all. Good product, saved my life a few time !!
I'm now in fine tuning mode, trying to filter real alerts from all alerts.
I want to know if it's possible to NOT receive this alert when and only when it's from my IP (69.66.66.66):
Code: Select all
Time: Sun Apr 16 10:52:57 2017 -0400
IP: 69.66.66.66 (CA/Canada/fakeptr.ca)
User: root
Re: cPanel root access alert exception
Posted: 17 Apr 2017, 17:07
by sawbuck
Add your IP to csf.ignore.
Re: cPanel root access alert exception
Posted: 17 Apr 2017, 19:08
by cglmicro
It's already in csf.ignore but still alert me that a root has logged in.
Re: cPanel root access alert exception
Posted: 17 Apr 2017, 19:31
by sawbuck
What root logins - SSH, su to root using SSH or WHM?
If "su", try setting LF_SU_EMAIL_ALERT.
Assume you've restarted CSF/LFD after making previous changes?
Re: cPanel root access alert exception
Posted: 17 Apr 2017, 20:10
by Sergio
Or simpler than that create an email rule to delete that email before it gets in your inbox.
Re: cPanel root access alert exception
Posted: 17 Apr 2017, 21:21
by cglmicro
In fact, when I log in WHM, or when I log in SSH in terminal, I receive this email: I might consider a rule in my Outlook. Yes my CSF+LFD was restarted since I added my IP to this file months ago when I installed CSF.
Thank you.
Re: cPanel root access alert exception
Posted: 17 Apr 2017, 22:47
by Sergio
cglmicro wrote: ↑17 Apr 2017, 21:21
In fact, when I log in WHM, or when I log in SSH in terminal, I receive this email: I might consider a rule in my Outlook. Yes my CSF+LFD was restarted since I added my IP to this file months ago when I installed CSF.
Thank you.
Easier than Outlook, create the rule in your email account, so, it will never leave the server to your outlook. Go to your webmail and create there the rule is easier.
Sergio
Re: cPanel root access alert exception
Posted: 18 Apr 2017, 01:50
by cglmicro
I double check and you were right !! My IP was no longer in the csf.ignore.
I've added it again and no more email when I log in. Thanks !!