How to configure LFD so that it does not kill cPanel related processes due to excessive resource usage warnings

Introduction

It is possible that cPanel related tasks such as using the Transfer Tool could trigger ConfigServer's LFD to kill the cPanel related processes depending on the limits that you have set. You can determine if LFD is killing processes with the following command:

grep Kill:1 /var/log/lfd.log

The following procedure outlines how you can whitelist cPanel related processes so that they are exempt from LFD's monitoring.

IMPORTANT

ConfigServer's LFD software is not created by, provided by, or supported by cPanel. The following information is provided as a courtesy only, and cPanel support cannot provide assistance with performing the process outlined below. If you need assistance with configuring LFD, please reach out to ConfigServer support, or make use of the ConfigServer forums.

Procedure

1. Login to WHM as the root user

2. Navigate to: Home »Plugins »ConfigServer Security & Firewall

3. Scroll to the "lfd - Login Failure Daemon" section 

4. Click on the dropdown next to: "Edit lfd ignore file"

5. Select "Process Tracking"

6. Review the configuration and uncomment any of the existing cPanel processes that you would like for LFD to ignore. This is also your opportunity to review the documentation within the configuration file to become more familiar with how to edit the configuration.

7. If the service that you are wanting to ignore is not already listed, review the /var/log/lfd.log file to find the processes that are being killed by LFD

8. The following is an example of how you can whitelist the cPanel Transfer Tool processes:

exe:/usr/bin/tar
exe:/usr/bin/rsync

9. Once you have made your desired changes, click the "Change" button

NOTE: It is important that you understand the security implications involved in whitelisting these processes if you intend to leave them in the configuration permanently. If you are not sure, you should remove the configuration as soon as you have completed your transfer and / or reach out to the ConfigServer forums / Support to help clarify your understanding of the situation. cPanel support is not able to assist with providing clarification on this topic relating to third-party software.

NOTE: The above example configuration should work to whitelist the cPanel Transfer Tool, but it may not be optimal for long-term use. Consulting with individuals who are more familiar with ConfigServer software is recommended if you intend on using this configuration for any extended length of time.