WHM/Cpanel root access alert email logic
Posted: 25 Mar 2021, 09:39
Is the intended behavior that csf /lfd will only email upon the first WHM root access from the same IP within so many hours?
I'm trying to figure out why lfd only sent one email "WHM/Cpanel root access alert" when I logged in and out and then in again a few times to WHM. The cpanel login_log shows all three WHM logins, but lfd only emailed once and only logged the first whm login to /var/log/lfd.log
I'm trying to figure out why lfd only sent one email "WHM/Cpanel root access alert" when I logged in and out and then in again a few times to WHM. The cpanel login_log shows all three WHM logins, but lfd only emailed once and only logged the first whm login to /var/log/lfd.log