The cPanel Service Daemons

This daemon improves the performance of EasyApache 4's PHP-based internal applications.

This daemon scans your server for malicious programs.

This daemon provides fast search capabilities for IMAP mailboxes.

This daemon improves the performance of PHP-based internal applications that ship with cPanel & WHM, such as:

• phpMyAdmin
• phpPgAdmin
• Webmail applications
• Any third-party PHP application that the user installs.

This daemon enables a set of HTTP extensions that allow users to manage their websites remotely.

This daemon manages Greylisting, a service that protects your server against spam from sources that your server does not recognize. For more information, read our Greylisting documentation.

This daemon manages cPHulk Brute Force Protection, a service that provides protection for your server against brute force attacks.

This daemon is the application server for cPanel, WHM, and Webmail services.

The cron scheduling daemon. For more information, read our Cron Jobs documentation.

dnsadmin runs as a standalone daemon. This improves speed, but increases it memory usage. Deselect this option if you wish to use multiple dnsadmin processes for zone-related actions.

The SMTP mail server daemon is the part of your mail server that sends and receives mail. We recommend that you monitor and enable this feature for most servers.

By default, Exim listens to the following ports:

• 25
• 465
• 587

This option allows you to configure Exim to listen to an additional port.

The FTP server daemon runs your FTP server. Enable this feature if you plan to host other people’s websites on your web server.

The web server daemon processes HTTP requests from visitors. Enable this feature to host websites with your web server.

The IMAP daemon for Dovecot® processes how your users download their mail.

For more information, read our IMAP vs. POP3 documentation.

This feature allows you to add more than one IP address to your network adapter. Use this configuration to run multiple connections on a single network, where each connection serves an additional purpose.

The Local Mail Transport Protocol (LMTP) server allows Exim to connect to the Dovecot mail server.

The Mailman mailing list manager allows your users to create a single email address to send mail to multiple email addresses. For more information, read our Mailing Lists documentation.

The MySQL^® database server processes database queries. If you plan to host any content management systems or applications that require a database, enable this feature or the postgresql server.

The Berkeley Internet Name Domain (BIND), NSD, PowerDNS, or MyDNS daemon runs the nameservers.

This daemon manages a cache for name service requests.

The Passive OS Fingerprinting daemon (p0f) reports the visitor's operating system and other information for email notifications that the system administrator requests in the Contact Manager interface. This information helps a system administrator quickly identify visitors that trigger events that cause alerts. The spam prevention and cPHulk systems use this information to identify potential spammers and brute force attacks.

For example, if a user logs in to a server from multiple locations and uses multiple operating systems, this may indicate that someone has compromised the user's account.

For more information about this daemon, read the Passive OS Fingerprinting documentation at github.

The POP3 daemon processes how your users will download their mail.

The PostgreSQL^® database server processes database queries. If you plan to host any content management systems or applications that require a database, enable this feature or the mysqld server.

The system log daemon monitors your web server and logs the system activity.

The Apache SpamAssassin daemon attempts to filter spam messages. If you disable this daemon, make sure that you also disable it in WHM's Tweak Settings interface (WHM >> Home >> Server Configuration >>Tweak Settings).

The secure shell (SSH) daemon allows users to connect to your server in a terminal session via SSH.

The system log daemon. This daemon handles your web server's monitoring and logging system information.

Tomcat is an Apache module that provides a web server in addition to the Apache web server. For more information, read our EasyApache 3 Tomcat documentation.