ignore process in csf.pignore with wildcard

[prakashkhadka]

I am getting a lots of alerts like below

Code: Select all

Executable:

/usr/bin/php


Command Line (often faked in exploits):

/usr/bin/php /home/username/public_html/wp-admin/admin-ajax.php

I do not want to get this kind of alerts therefore I have added following in my csf.pignore list

Code: Select all

cmd:/usr/bin/php /home/*/public_html/wp-admin/admin-ajax.php

and restarted csf and lfd but still I am getting alerts. How to do this correctly??

[Elizine]

Hi,
If you want the csf.pignore to be ignored do "csf -r" from the command line and also restart "service lfd".

Hope this will help you.