WebDisk (WebDav) CSF LFD warnings

jazee

• March 17, 2017 19:28

I tried using Webdisk for the first time and I'm running Configserver Firewall and getting LFD warnings. I've tried adding the process name to the process ignore file but still getting both of these. Anyone been in the same boat know the best way to handle it? Excessive resource usage Resource: Process Time Exceeded: 21688 > 1800 (seconds) Executable: /usr/local/cpanel/3rdparty/perl/524/bin/perl Command Line: cpdavd - authenticated as PID: 14431 (Parent PID:11194) Killed: No Suspicious process running under user Executable: /usr/local/cpanel/3rdparty/perl/524/bin/perl Command Line (often faked in exploits): cpdavd - authenticated as

• 

  sktest123

  • March 18, 2017 02:40

  Add exe /usr/local/cpanel/3rdparty/perl/524/bin/perl to /etc/csf/pignore

  0
• 

  jazee

  • March 18, 2017 16:02

  Wouldn't that filter anything that is run via Perl not just WebDisk (cpdavd)? I just want to exclude cpdavd.

  0
• 

  ChrisI

  • March 20, 2017 12:09

  Hello, I believe that adding this to the csf.pignore file should prevent those notifications: exe:/usr/local/cpanel/cpdavd Thanks!

  0

Please sign in to leave a comment.