The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Alerts from cPanel server monitoring

Discussion in 'Security' started by NaniN, Aug 5, 2017.

  1. NaniN

    NaniN Registered

    Joined:
    Aug 5, 2017
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Hi Friends,

    I'm receiving continuous alerts from cPanel server. Please find attached screenshot for reference.

    I'm not sure why we are receiving this mails. Could you please let us know how to resolve this issue?

    Sample Email: pastebin.com/QCMdbGT7

    Thanks in advance !

    --
    Nani
     

    Attached Files:

    #1 NaniN, Aug 5, 2017
    Last edited by a moderator: Aug 5, 2017
  2. Eminds

    Eminds Well-Known Member

    Joined:
    Nov 10, 2016
    Messages:
    174
    Likes Received:
    10
    Trophy Points:
    18
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Looks like you have made some changes in exim configuration and the service at the moment is down. Read the email that you are receiving carefully. These emails nothing but alert of service down. You will need to fix the exim service.
     
  3. NaniN

    NaniN Registered

    Joined:
    Aug 5, 2017
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Hello Eminds,

    Thank you for your reply.

    We didn't make any changes to exim configuration if you see the attached screenshot, all the cPanel services are failing continuously.
     
  4. rpvw

    rpvw Well-Known Member

    Joined:
    Jul 18, 2013
    Messages:
    260
    Likes Received:
    76
    Trophy Points:
    28
    Location:
    Spain
    cPanel Access Level:
    Root Administrator
    I would guess you are using exim on port 26 and it indicates in the alert you received that chkservd cannot connect to 127.0.0.1:26
    As the notification states - the first and most important thing to ascertain is whether these are false positives, or if the services were actually down......in which case you may have much bigger problems o_O

    Assuming the alerts are as a result of false positives, follow the instruction for each alert, one by one, until you have resolved the issues.

    As far as the other services are concerned, you may need to revise firewall access from 127.0.0.1 to the ports that they listen on. For full information on ports that should be configured please see How to Configure Your Firewall for cPanel Services - cPanel Knowledge Base - cPanel Documentation

    Additional information on the TailWatch / chkservd services are available at TailWatch - cPanel Knowledge Base - cPanel Documentation

    You may also want to check that access by localhost to any of the monitored services have not been blocked by Host Access Control entries.
     
    #4 rpvw, Aug 6, 2017
    Last edited: Aug 6, 2017
    cPanelMichael likes this.
  5. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    37,064
    Likes Received:
    1,286
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    Can you verify if this continues to happen, or if you only received the alerts after rebooting the system? Chkservd can sometimes start before the services it monitors after rebooting the system, temporarily leading to those alerts for a few minutes until the services resume.

    Thank you.
     
Loading...

Share This Page