Page 1 of 1

lfd on server : Suspicious File Alert after buddycpanel update

Posted: 08 Feb 2021, 13:58
by wci
Dear community,
I hope you will be able to help me.

After buddycpanel upgrade
> https://www.buddyns.com/support/cpanel-whm/#upgrade
I am getting LFD Suspicious File Alerts via server email:

Screenshot > https://www.screencast.com/t/MatuoUsTp
File: /tmp/buddycpanel.OuiKw/buddycpanel-latest/plugin/addon_buddyns.cgi
Reason: Script, file extension
File: /tmp/buddycpanel.OuiKw/buddycpanel-latest/scripts/buddyns_ctl.py
Action: Too many hits for *LF_DIRWATCH* - Directory Watching disabled

Please help me to solve those issues.
BR, Alex

Re: lfd on server : Suspicious File Alert after buddycpanel update

Posted: 02 Mar 2021, 11:42
by wci
Meanwhile I could have found out how to solve this issue.

I've added those files which are found in file alerts to the fignore file.

Therefore you need to access your server via ssh, the add the files in fignore
Via ssh

Code: Select all

cd etc/csf

Code: Select all

pico csf.pignore
Edit the file by adding the corresponding files and save

BR, Alex