Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

lots of exim procs

Discussion in 'General Discussion' started by markjohnson, May 18, 2009.

  1. markjohnson

    markjohnson Member

    Joined:
    Apr 23, 2009
    Messages:
    21
    Likes Received:
    0
    Trophy Points:
    51
    The load avg is rocketing sky high and there are lots of exim (and perl) processes, run by root and mailnull.

    lsof shows most of the connections are being made from 41.219.211.163.

    I go to whm >> security centre >> Host access control and add the following to the table:

    Daemon: All
    Access List: 41.219.0.0
    Action: deny


    But doing lsof still shows the same IP address running exim and lots of perl processes.

    I also tried /sbin/iptables -A INPUT -s 41.219.211.163 -j DROP

    But /sbin/iptables --list does not list the blocked IP address.

    How can I totally block the culprit IP addresses from all services?
     
  2. JawadArshad

    JawadArshad Well-Known Member
    PartnerNOC

    Joined:
    Apr 8, 2008
    Messages:
    459
    Likes Received:
    6
    Trophy Points:
    68
    Location:
    PK
    cPanel Access Level:
    DataCenter Provider
    If you are on a VPS, ask your host to see if all iptables modules are installed correctly. You may also try installing CSF which is among the most recommended firewalls on cPanel environment.

    http://www.configserver.com/free/csf

    Once CSF is setup, you can simply run

    csf -d 41.219.211.163
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. thewebhosting

    thewebhosting Well-Known Member

    Joined:
    May 9, 2008
    Messages:
    1,201
    Likes Received:
    1
    Trophy Points:
    68
    We are using CSF firewall and it is a best firewall to block IP addresses doing harmful activity to your server.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice