You can find our user documentation at

Check out our new API beta site!

Page tree
Skip to end of metadata
Go to start of metadata


For cPanel & WHM version 11.50

(Home >> Service Configuration >> Service Manager)


This interface lists your server's TailWatch Drivers, and allows you to perform the following actions on them:

TailWatch Drivers

TailWatch DriverDescription

This driver enables support for IMAP and POP3 before SMTP authentication. This configuration allows a user who authenticates against the POP3 or IMAP service in the last 30 minutes to send emails via SMTP without the need to authenticate again.

All users who share that authenticated user's IP address also receive SMTP authentication. As a result, this option is less secure than password authentication.


As of cPanel & WHM version 11.32, this setting defaults to disabled. We recommend that system administrators use SMTP authentication, because most modern mail clients now support SMTP authentication.

To disable the Antirelayd driver from the command line, run the following command as the root user:

/usr/local/cpanel/bin/tailwatchd --disable=Cpanel::TailWatch::Antirelayd

This driver monitors the services that you configure in the Service Manager interface.

  • The ChkServd driver attempts to restart a service when it detects that the service fails.
  • The ChkServd driver sends alerts about service failure, recovery, and timeouts to the contact information that you provide in WHM's Basic cPanel & WHM Setup interface (Home >> Server Configuration >> Basic cPanel & WHM Setup).
EximstatsThis driver tracks Exim mail statistics. The Eximstats driver maintains the email bandwidth logs, limits email usage, and populates data for the Mail Delivery Reports system.

This driver manages the jailshells that the EXPERIMENTAL: Jail Apache Virtual Hosts using mod_ruid2 and cPanel® jailshell option in WHM's Tweak Settings interface (Home >> Server Configuration >> Tweak Settings) uses. The JailManager driver updates each user's jailshell with the root filesystem. 


If the EXPERIMENTAL: Jail Apache Virtual Hosts using mod_ruid2 and cPanel® jailshell option is disabled, the system disables the JailManager option.

ModSecLogThe driver parses the ModSecurity™ audit log and stores the information in the modsec database.
cPBandwdThis driver generates the bandwidth logs for the IMAP and POP3 mail services.

Service daemons


The server's installed services determine which daemons this interface displays.

ClamAV Daemon This daemon enables Clam AntiVirus (ClamAV). ClamAV is an antivirus software toolkit that is available for cPanel & WHM installations. For more information, read our Configure ClamAV Scanner documentation.
cPanel DAV DaemonThis daemon enables a set of HTTP extensions that allow users to manage their websites remotely. Leave this daemon active if you plan to host other people’s websites on your web server.
cPanel Greylisting DaemonThis daemon manages Greylisting, a service that protects your server against Spam from sources that your server does not recognize. For more information about Greylisting, read our Greylisting documentation.
Cron Daemon The cron scheduling daemon. For more information about cron, read our Cron Jobs documentation.
cPanel DNS Admin Cache dnsadmin runs as a standalone daemon. This improves speed, but increases it memory usage. Deselect this option if you wish to use multiple dnsadmin processes for zone-related actions.
Entropy Chat Server

The HTML-based chat server.


We strongly recommend that you do not enable this daemon, because it poses security risks to your server. The Entropy Chat script does not sanitize input from the chat message field before use. Malicious users can exploit this vulnerability to pass harmful data to your server via the chat message field.

Exim Mail Server

The SMTP mail server daemon is the part of your mail server that sends and receives mail. We recommend that you monitor and enable this feature for most servers.


If you disable this service, the following options do not appear in WHM's Tweak Settings - Mail interface interface (Home >> Server Configuration >> Tweak Settings):

  • Discard FormMail-clone message with bcc:
  • Email delivery retry time
  • Track email origin via X-Source email headers
  • Max hourly emails per domain
  • The percentage of email messages (above the domain's hourly maximum) to queue and retry for delivery.
  • Maximum percentage of failed or deferred messages a domain may send per hour
  • Number of failed or deferred messages a domain may send before protections can be triggered
  • Add X-PopBeforeSMTP header for mail sent via POP-before-SMTP
  • Enable BoxTrapper spam trap
  • Enable Email Archiving support
  • Enable Apache SpamAssassin™ spam filter
Exim Mail Server (on another port)

By default, Exim listens to the following ports:

  • 25
  • 465
  • 587

This option allows you to configure Exim to listen to an additional port.


In the text box, specify the additional port number on which you wish to allow Exim to run.

FTP Server

The FTP server daemon runs your FTP server. Enable this feature if you plan to host other people’s websites on your web server.


 We strongly recommend that you monitor this feature.

Apache Web Server The Apache web server daemon handles HTTP requests from visitors. Enable this feature to host websites with your web server.
IMAP Server

The IMAP daemon for Courier or Dovecot handles how your users download their mail.


We strongly recommend that you monitor this daemon.

 For more information, read our IMAP vs. POP3 documentation.

IP Aliases This feature allows you to add more than one IP address to your network adapter. Use this configuration to run multiple connections on a single network, where each connection serves an additional purpose.
MailmanThe Mailman mailing list manager allows your users to create a single email address to send mail to multiple email addresses. For more information, read our Mailing Lists documentation.
MySQL Server

The MySQL® database server handles database queries. If you plan to host any content management systems or applications that require a database, enable this feature or the postgresql server.


We recommend that you monitor this daemon. The system does not monitor this daemon by default.

DNS Server

The Berkeley Internet Name Domain (BIND), NSD, or MyDNS daemon runs the nameservers.


You should only enable this daemon if you wish to use your own nameservers. For more information, read our Nameserver Selection documentation.

Passive OS Fingerprinting Daemon The Passive OS Fingerprinting daemon reports the visitor's operating system and other information for email notifications. This information helps you quickly identify visitors that trigger events that cause alerts.
POP3 Server

The POP3 daemon for Courier or Dovecots handles how your users will download their mail.


We strongly recommend that you monitor this daemon. The system does not monitor this daemon by default.

PostgresSQL Server

The PostgreSQL database server handles database queries. If you plan to host any content management systems or applications that require a database, enable this feature or the mysqld server.

Apache SpamAssassin™ The Apache SpamAssassin™ daemon attempts to filter spam messages. If you disable this daemon, make sure that you also disable it in WHM's Tweak Settings - Mail interface (Home >> Server Configuration >> Tweak Settings).
SSH Daemon The secure shell (SSHdaemon allows users to connect to your server in a terminal session via SSH.
rsyslog System Logger Daemon

The system log daemon monitors your web server and logs the system activity.


We strongly recommend that you enable this daemon.

TailWatch Drivers

The log monitor service daemon functions as a framework that allows you to monitor user-interpretable logs.


We strongly recommend that you enable this daemon.

TaskQueue ProcessorThis daemon allows cPanel & WHM to queue and process tasks in order to combine redundant requests and minimize the number of service restarts  For more information, read The Task Queue System in cPanel & WHM documentation.
Tomcat JSP ServerThis daemon allows Tomcat to compile JavaServer Pages.