How to update Email Notification address for CSF/LFD?

Updating the email notification address for CSF/LFD in the WHM (Web Host Manager) Panel ensures that security-related alerts and notifications are sent to the appropriate recipient. By configuring the correct email address, server administrators can promptly receive notifications about potential security threats, login failures, or firewall events.

Failure to update the email notification address may result in important alerts being sent to an outdated or incorrect email address, leading to delays in addressing security issues and potentially leaving the server vulnerable to attacks. Therefore, keeping the email notification address up to date in the WHM Panel is essential for maintaining the security and integrity of the server.

Sometimes, if you don't set up the email address for CSF/LFD notifications, your server's EXIM queue can fill up. This happens because notifications go to the root user by default, but the root user doesn't accept local email deliveries.

There are two main ways to change the email address for CSF/LFD notifications in cPanel. You can do it through the WHM panel or through SSH. Here's how to do both:

 

Steps To Change The Email Address For Csf/lfd Notifications From Whm Panel

Step 1: Log in to WHM.

Step 2: Go to "ConfigServer Security & Firewall" under the "Plugin" section.

 

 

Step 3: Click on "Firewall Configuration" to edit the CSF configuration file.

 

 

Step 4: Find "LF_ALERT_TO (or something similar) which has the current email address for notifications. Change it to the new one you want. Here, we have entered [email protected] as an example.

 

 

Step 5: Click "Change" to save the changes.

 

 

Step 6: Restart both csf and lfd services to apply the changes by clicking on "Restart csf+lfd."

 

 

Steps to change the email address for CSF/LFD notifications from SSH:

Step 1: Log in to your server using SSH.

Step 2: Open the CSF configuration file using a text editor. Usually, you can find it at /etc/csf/csf.conf.

 

 

Step 3: Look for the part of the file that talks about email settings. You'll see things like LF_ALERT_TO, LF_ALERT_FROM, etc.

Step 4: Find LF_ALERT_TO (or something similar) which has the current email address for notifications. Change it to the new one you want. Here, we have entered [email protected] as an example.

 

 

Step 5: Save the changes you made.

Step 6: Restart CSF/LFD to make the changes work. You can do this by typing "csf -r" in the terminal.

 

 

Step 7: After restarting, do a test to make sure notifications go to the new email address. You can try something like a failed login to trigger a notification.

Step 8: Keep an eye on your new email address to make sure you're getting CSF/LFD notifications correctly.

If you follow these steps, you should be able to update the email address for CSF/LFD notifications on your server.

 

Conclusion

In conclusion, updating the email notification address for CSF/LFD is crucial to ensure that important alerts are received promptly. By following the outlined steps, users can easily modify the notification settings to their preferred email address, thereby enhancing system monitoring and security measures.


Was this answer helpful?

« Back

chat