We use Config Server Firewall (CSF) on our Cpanel server, a good one and strongly integrated with WHM. This weekend a tweaking resulted in many many emails notifications from LFD which is very annoying. The content of notifications emails is like:
excessive resource usage notifications
and
Suspicious process running under user XXXX
It seems normal and nothing to worry about it, you can take following steps to disable these notifications.
To disable these messages from WHM:
Navigate to Plugins >> ConfigServer Security & Firewall >> firewall configuration
Search for PT_LIMIT and set it 0 to disable.
If you are getting excessive memory usage alerts which are false flags, set PT_USERMEM to 0 .
Once you are done Restart CSF
csf -r
If you need to disable all kind of Alerts, you need to edit /etc/csf/csf.conf file and then In csf.conf search for: “EMAIL_ALERT” and then you can disable it, there are several kind of email alerts in that csf.conf.
To ignore certain processes which trigger “Excessive resource usage”, check this article.