-DELETE- Suspicious "spamd child" Process Emails From CSF Firewall Software

If you have a dedicated server or VPS with the Config Server Firewall (CSF) software installed (any dedicated or VPS managed by us has this software installed by default) and are receiving a number of "suspicious process" emails that mention the "spamd child" process, this is the result of a recent update to the CSF software.  The 4.35 version of CSF removed the exclusion it had for the "spamd child" process (this is the spam filter process), so whenever the spamd process is doing a lot of work CSF will identify it as a "suspicious process".  This can be avoided by adding the exclusion back into CSF.  Here's how:

1.  Log into Web Host manager (WHM)

2.  Click on "ConfigServer Security & Firewall" on the left side of the page at the bottom

3.  Click on "csf.pignore - Process Tracking" in the "lfd - Login Failure Daemon" section

4.  Add the following line to the list and click "Change":

cmd:spamd child

5.  Click the "Restart lfd" button

You're done!  You should no longer receive emails regarding the "spamd child" process.

  • Email, SSL
  • 55 Users Found This Useful
Was this answer helpful?

Related Articles

How do I find my root password?

1) Log into your billing account: https://portal.my-tss.com/clientarea.php 2) Click on the...

How to generate a CSR in WHM

You would like to purchase or transfer an SSL certificate but need a CSR to do so. Here's how to...

Changing ip addresses

To move an account from one ip to another in WHM:1) Log into WHM using root login details....

-DELETE How to downgrade MySQL from Version 5 to Version 4

If you've upgraded your MySQL Software to the newest version but for whatever reason need to...

How to disable Recursive DNS Lookups

A very common PCI Issue is related to the DNS servers.  In order to be PCI Compliant you must...