Hello

I currently have a CentOS 6.x box with whm/cpanel installed and using csf for firewall protection. I keep getting notification emails of "suspicious file alert".

Time: Sat Oct 13 15:34:01 2012 -0400
File: /tmp/.tmp
Reason: Suspicious directory
Owner: username:username(546:545)
Action: No action taken

My question is, I knoiw that there is a ignore file for CSF where I can add this to and it would no longer send me notifications. But I do not know the format on how to put it in the file. Can you please let me know how exactly I would write this in my ignore file for CSF? I know for afact that the file/directory are ok, but I just do not want to keep getting these notifications. Thanks!
James

The README clearly says "See each file for their specific purpose and syntax" about any csf.*ignore file. /etc/csf/csf.fignore takes one item per line. Ensure proper escaping is used: see chapter 9 "Directory Watching" for more.

Thank you for the link and your help. Sorry about the duplicate listing too.