How To Enable Shell Fork Bomb Protection In WHM?

In order to prevent a system crash, Shell Fork Bomb protection stops SSH/Telnet users from utilizing all of the server’s resources. Put simply, this script uses fork () to swiftly generate a large number of processes. By carrying out this procedure, you will be able to stop the system by completely filling the process table, making it impossible for you to utilize “ps.” In this scenario, you will also be unable to identify the perpetrator.

The complete process is mentioned below:

• Login to WHM with root access.

• Go to Security Center option from the navigation menu and click on Shell Fork Bomb Protection.

• Click on the ‘Shell Fork Bomb Protection’ icon.

• Click on ‘Enable Protection’ in order to enable this feature.

After the protection is enabled, the limits mentioned below are available for protecting the server:

Limit	Option	Description
200000	-c	Limits the maximum number of core files created.
200000	-d	Limits the maximum size of the process’s data segment.
200000	-m	Limits the maximum resident set size.
100	-n	Limits the maximum number of open file descriptions.
8192	-s	Limits the maximum stack size.
35	-u	Limits the maximum number of processes available for a single user.
200000	-v	Limits the maximum volume of virtual memory available for the process.

Note that the ‘u’ option limits the bash shell users (default for cPanel users) to 35 processes per user.

You can also execute this process through the command line:

• Login to SSH through root access.
• Execute the command mentioned below for enabling ‘Shell Fork Bomb Protection.

perl -I/usr/local/cpanel -MCpanel::LoginProfile -le ‘print [Cpanel::LoginProfile::install_profile(‘limits’)]->[1];’

• Now you have to restart the cPanel service with the command mentioned below.

# service cpanel restart

• You can also disable the Shell Form Bomb Protection with the command mentioned below.

perl -I/usr/local/cpanel -MCpanel::LoginProfile -le ‘print [Cpanel::LoginProfile::remove_profile(‘limits’)]->[1];’

• You have to again restart the cPanel service after executing this command.

# service cpanel restart

However, it is recommended to enable this feature through the WHM API. In case you need any further assistance with this process, you can get in touch with our support department.

How to Delete a MySQL Database in a cPanel Account?