Disable lfd email alerts for whitelisted IP?

USA_Webmaster

• October 30, 2018 20:01

I was trying to reply to this thread but forums locked old post --

• 

  GOT

  • October 31, 2018 01:31

  This is not coming from cPanel. It's coming from your lfd configuration. Open the firewall config and look for the ssh alert setting

  0
• 

  USA_Webmaster

  • October 31, 2018 01:38

  Thanks for rapid response and attention buddy... So your saying that both CSF LFD & cPHulk do the same job in somethings... like alerts in this case? Is one service better than the other... or more superior? Home " Plugins " ConfigServer Security & Firewall and I clicked Firewall Configuration than click "off" and saved + restarted. Will cPHulk still notify me if I have a security breach in the future? Like someone logs into root NOT on the whitelisted IP? - Removed -

  0
• 

  GOT

  • October 31, 2018 13:14

  We generally turn off CPHulk when we are using LFD because by and large they overlap a lot. The setting in LFD to turn those notices off is LF_SSH_EMAIL_ALERT = "0" However, it does not discriminate between whitelisted IPs or not. The notices are either on or off.

  0
• 

  cPanelMichael

  • October 31, 2018 16:05

  Hello @USA_Webmaster, cPHulk and CSF/LFD are two separate applications. cPHulk is included as part of cPanel & WHM and is used to help prevent brute force attacks on the system. CSF/LFD is a third-party firewall management application. There is some overlap, but CSF/LFD performs more than just brute force detection. You can see all of it's features at: ConfigServer Security & Firewall (csf) Thank you.

  0
• 

  eugenevdm.host

  • October 26, 2020 02:15

  @cPanelMichael, Do you agree with the one user here if one uses CSF that cPHulk should be switched off? I'm finding I have to do lots of overlapping administration running both.

  0
• 

  eugenevdm.host

  • October 29, 2020 06:25

  Bump? @cPanelLauren I would like some official feedback about running multiple firewalls and WHM as it seems redundant and more complex and unscalable if you're running many accounts. Does GoDaddy use CSF, anyone knows? That is a scalable business and by all accounts they can't be on the phones the whole asking people what their IPs are and unblocking them.

  0
• 

  cPRex Jurassic Moderator

  • November 05, 2020 17:37

  Hey there, @eugenevdm.host Previously when this has come up we have always recommended running both:

  0

Please sign in to leave a comment.