How to Disable LFD Notification for Permanent IP Block?

Many of the clients are getting lots of LFD notification about IP block due to SSH failure. Do the following steps to disable such notifications? Here we provide an example notification regarding IP block.

Time: Fri Oct 24 06:25:44 2014 +0100

IP: 91.201.244.50 (UA/Ukraine/-)

Failures: 10 (ftpd)

Interval: 3600 seconds

Blocked: Permanent Block

 

Steps to disable IP block LFD notifications.

1) Login to WHM.

2) Navigate to “ConfigServer Security & Firewall” under “Plugin” section.

Disable lfd for ip block

 

3) Click on “Firewall Configuration” button to edit the CSF configuration File.

Disable lfd for ip block

 

4) Search for “LF_PERMBLOCK_ALERT” on the configuration file and click on “Off” button.

Disable lfd for ip block

 

5) Click on “Change” button to save the changes.

Disable lfd for ip block

 

We need to restart csf and lfd services to enable all changes that we made in the above steps. So click on the “Restart csf+lfd” button to restart both the services.

Disable lfd for ip block

We can do above settings from the server via terminal.

1) Log in to the server via SSH.

2) Open csf configuration file and search for “LF_PERMBLOCK_ALERT” and set the value to 0.

# vi /etc/csf/csf.conf

LF_PERMBLOCK_ALERT =0

 

3) Then you need to restart both csf and lfd services to enable the changes.

# service csf restart

# service lfd restart

 

If you need any further help please do reach our support department.

 

 

 

Leave a Reply