Page 1 of 1

csf.pignore /home/virtfs executables

Posted: 21 Apr 2017, 22:23
by 01i
Recently I started getting email alerts from LFD about excessive resource usage caused by my sftp server connection.

I hadn't made any changes, and put off modifying the csf.pignore file for a couple of months.

Today I checked the csf.pignore file, and there is already an entry for
exe:/usr/libexec/openssh/sftp-server
Looking at the alerts it looks like I need to add wildcarded virtfs entries to stop the alerts
Executable: /home/virtfs/tw/usr/libexec/openssh/sftp-server
Command Line: /usr/libexec/openssh/sftp-server
Is this right? LFD has echoed the command line identical to an entry in the ignore file, Shouldn't my sftp server already be excluded?

Re: csf.pignore /home/virtfs executables

Posted: 23 Apr 2017, 05:34
by Sergio
Command LIne or "cmd" is not the same as Executable "exe", so, if you don't have the following line add it to csf.pignore:

cmd:/usr/libexec/openssh/sftp-server