whitelist lfd suspicious process wp-cron.php

[webmaster]

What file do I edit to whitelist or safely ignore the lfd alert for wp-cron.php?

• csf.ignore
• csf.pignore
• maybe a different one?

I edit /etc/csf/csf.pignore and put this inside of it:

Code: Select all

exe:/home/userXYZ/public_html/wp-cron.php

I even restart CSF from SSH PuTTY and WHM control panel

Why do I still receive email from LFD service?

Code: Select all

Executable:

/usr/selector/php

Command Line (often faked in exploits):

/usr/bin/php /home/userXYZ/public_html/wp-cron.php

[webmaster]

I may have found my answer here, it looks like csf.fignore is the file to be editing.