WHM/Cpanel root access alert email logic

Post Reply
navyblue
Junior Member
Posts: 2
Joined: 27 Jan 2021, 08:05

WHM/Cpanel root access alert email logic

Post by navyblue »

Is the intended behavior that csf /lfd will only email upon the first WHM root access from the same IP within so many hours?

I'm trying to figure out why lfd only sent one email "WHM/Cpanel root access alert" when I logged in and out and then in again a few times to WHM. The cpanel login_log shows all three WHM logins, but lfd only emailed once and only logged the first whm login to /var/log/lfd.log
Post Reply