Question
Why am I receiving Permanent Block notifications when LFD blocks an IP address?
Example:
lfd on example.hostname.tld: blocked IPAddress (CountryCode/Country/-)
Answer
These notifications are generated by 3rd-party software, ConfigServer LFD (Login Failure Daemon). You can enable or disable this notification by modifying the LF_PERMBLOCK_ALERT setting in WHM >> ConfigServer Security & Firewall >> Firewall Configuration.
Optionally, you can disable the notification via SSH as the root user by changing LF_PERMBLOCK_ALERT = "1" to LF_PERMBLOCK_ALERT = "0" in /etc/csf/csf.conf.
For support with LFD, you will need to contact ConfigServer directly: