How to Disable All cPanel LFD Alerts?

Posted on April 4th, 2018

Clients are getting so many emails regarding all LFD alerts, “so if they wish to disable the alert please follow the below steps.

Steps to disable all LFD email Alerts.

1) Login to WHM.

2) Navigate to “ConfigServer Security & Firewall” under “Plugin” section.

LFD Email Alerts


3) Click on “Firewall Configuration” button to edit the CSF configuration file.

Disable LFD alerts


4) Search for “LF_EMAIL_ALERT” on the configuration file and change it from “On” to “Off” button.

Disable LFD alerts


5) Click on “Change” button to save the changes.

Disable LFD alerts


We need to restart csf and lfd services to enable all changes that we made in the above steps. So click on “Restart csf+lfd” button to restart both the services.

Disable LFD alerts


We can do above setting via terminal.

1) Log in to the server via SSH.

2) Open csf configuration file and search for LF_PERMBLOCK_ALERT and set the value with 0.

# vi /etc/csf/csf.conf


3) Then you need to restart both csf and lfd services to enable the changes.

# service csf restart

# service lfd restart


If you need any further help please do reach our support department.



5 Responses to “How to Disable All cPanel LFD Alerts?”

  1. Ben Taylor says:

    This does not disable all email alerts.. It only disables failed logins. And to be quite honest CSF seems to not care a toss if you disable alerts as your inbox still receives them.

    Search on their own forums for non-replied-to-posts about emails still spewing into your inbox, to the point where your email provider drops them to spam and even sometimes blocks them because there are too many.

  2. Ciranda says:

    Obrigado por ajudar nisso!

  3. Sarel le Roux says:

    Know this is an old thread, but hopefully might help someone out.

    If mailers continue to be sent after disabling it withing the firewall plugin, check Contact Manager if you have a email address set and for what alert level. Review the alert level as it is very likely that cpanel is sending mails to state lfd blocked/failed/restarted and then it will be because the alert level that is set for services.

  4. Shaun Reitan @ NDCHost says:

    Doing the above does not completely stop all emails. You have to forward them to an alias that will dump them.

    * Step 1: Create the alias by running the follwoing command as root.

    echo ‘devnull: /dev/null’ >> /etc/aliases

    * Step 2: Modify the email templates to address from root to the devnull address you just created

    sed ‘s/To\: root/To\: devnull/g’ -i /etc/csf/alerts/*

Leave a Reply