The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

lots of exim procs

Discussion in 'General Discussion' started by markjohnson, May 18, 2009.

  1. markjohnson

    markjohnson Member

    Joined:
    Apr 23, 2009
    Messages:
    21
    Likes Received:
    0
    Trophy Points:
    1
    The load avg is rocketing sky high and there are lots of exim (and perl) processes, run by root and mailnull.

    lsof shows most of the connections are being made from 41.219.211.163.

    I go to whm >> security centre >> Host access control and add the following to the table:

    Daemon: All
    Access List: 41.219.0.0
    Action: deny


    But doing lsof still shows the same IP address running exim and lots of perl processes.

    I also tried /sbin/iptables -A INPUT -s 41.219.211.163 -j DROP

    But /sbin/iptables --list does not list the blocked IP address.

    How can I totally block the culprit IP addresses from all services?
     
  2. JawadArshad

    JawadArshad Well-Known Member
    PartnerNOC

    Joined:
    Apr 8, 2008
    Messages:
    447
    Likes Received:
    4
    Trophy Points:
    18
    Location:
    PK
    cPanel Access Level:
    DataCenter Provider
    If you are on a VPS, ask your host to see if all iptables modules are installed correctly. You may also try installing CSF which is among the most recommended firewalls on cPanel environment.

    http://www.configserver.com/free/csf

    Once CSF is setup, you can simply run

    csf -d 41.219.211.163
     
  3. thewebhosting

    thewebhosting Well-Known Member

    Joined:
    May 9, 2008
    Messages:
    1,201
    Likes Received:
    1
    Trophy Points:
    38
    We are using CSF firewall and it is a best firewall to block IP addresses doing harmful activity to your server.
     
Loading...

Share This Page