lfd on hostname: Excessive resource usage: redis after adding to whitelist.

[meek2100]

I'm still getting these emails even after following the instructions on http://wiki.centos-webpanel.com/csflfd-firewall-configuration and added "exe:/usr/bin/redis-server" and "exe:/usr/bin/memcached" to the bottom of the /etc/csf/csf.pignore.

What else can I do? Getting 2 emails every hour is getting really annoying.

Time:         Wed Feb 12 03:00:29 2020 +0000
Account:      memcached
Resource:     Process Time
Exceeded:     12863 > 1800 (seconds)
Executable:   /usr/bin/memcached
Command Line: /usr/bin/memcached -u memcached -p 56861 -m 64 -c 1024
PID:          1625 (Parent PID:1625)
Killed:       No

Time:         Wed Feb 12 03:00:29 2020 +0000
Account:      redis
Resource:     Process Time
Exceeded:     12863 > 1800 (seconds)
Executable:   /usr/bin/redis-server
Command Line: /usr/bin/redis-server 127.0.0.1:6379                     
PID:          1637 (Parent PID:1637)
Killed:       No

[rcschaff]

did you restart csf after adding them to pignore?

[ejsolutions]

Try

Code Select Expand


user: memcached
exe: /usr/bin/memcached
cmd: /usr/bin/memcached -u memcached -p 56861 -m 64 -c 1024

user: redis
exe: /usr/bin/redis-server
cmd: /usr/bin/redis-server 127.0.0.1:6379                     


[meek2100]

@rcschaff
Yes, I did restart csf after making the changes and I did stop getting email for rpcbind, so it does seem like it worked for that just not redis or memcached.

Here is what I currently added in /etc/csf/csf.pignore.
exe:/usr/sbin/rpcbind
exe:/usr/sbin/redis-server
exe:/usr/sbin/memcached


@ejsolutions
Thanks for that suggestion.  I'll try this now, fingers crossed.

[meek2100]

@ejsolutions
Your suggestion worked great! No more emails.

[ejsolutions]

Good to know.
Can be hit/miss.