ConfigServer Services Blog

New csf v4.58

Changes:

  • Modified exim cipher check in Server Check to use openssl to test the expanded configured cipher suites to ensure SSLv2 is disabled

New csf v4.57

Changes:

  • Improved exim configuration option detection in Server Check
  • Added Exim Configuration checks to DirectAdmin Server Check
  • Modified csftest.pl to perform a modprobe on all used iptables modules before testing
  • Added PASV port hole warning on VPS servers to the output of csf on start and to the cPanel (if using pure-ftpd) Server Check
  • Added lfd to the DirectAdmin Service Monitor
  • Added back a revised Firewall Security Level option to UI

New csf v4.56

I have confirmed csf compatibility with Debian v5.0Changes:

  • Added TCP_OUT port 2222 for the DA default configuration for new installations
  • Added ICMP protocol to Advanced Allow/Deny Filters. See readme.txt for more information and examples
  • Updated readme.txt to reflect the Control Panel UI availability for cPanel, DirectAdmin and Webmin
  • Modified mod_security configuration file check to the TLD only of /usr/local/apache/conf/ and only files ending in .conf

New csf v4.55

Changes:

  • Fixed issue with csf.conf not being loaded for the Server Check Report
  • Removed erroneous chkconfig check from Server Check Report
  • Disabled various checks in Server Check Report for non-cPanel servers
  • Modified Debian/Ubuntu init entry creation and removal procedure
  • Modified Server Check to search for multiple named.conf locations

New csf v4.54

Changes:

  • Bug fix to Exploit Check code
  • Fixed problem with iptables logs not being collated if PS_INTERVAL is disabled but ST_ENABLE is enabled
  • Fixed potential problem with SMTPRELAY_LOG not being scanned when RT_RELAY_ALERT, RT_AUTHRELAY_ALERT or RT_POPRELAY_ALERT enabled

New csf v4.53

Changes:

  • Upgraded the csf Webmin UI module to the new csf UI and added installation/upgrade instructions to the install.txt for Webmin
  • Fixed image locations and javascript in DA and webmin UI
  • Updated the uninstall scripts and the uninstall section of install.txt

New csf v4.52

Changes:

  • Reverted lfd signalling on cPanel servers to allow UI restarts of lfd
  • Added warning in DA UI to upgrade csf from the root shell due to restrictions in DirectAdmin

NOTE: DA users should upgrade csf to this version from the root shell using “csf -u” and not use the Upgrade button in the UI

New csf v4.50

Changes:

  • Added restrictions information regarding the PORTFLOOD setting and ipt_recent to readme.txt (i.e. hit count max is 20)
  • Modular development of csf UI
  • Added DirectAdmin UI and installation support for csf/lfd
  • Added Statistics options (ST_ENABLE, etc) to generic csf installation
  • Added SMTP options (SMTP_BLOCK, etc) to generic csf installation
  • Removed pre-configured firewall settings through UI for redevelopment as it has become out-dated
  • Modify csf UI to signal lfd to start/restart/enable only. A one minute cron job will actually perform the signalled function. The CLI is unaffected and performs the command immediately. This is introduced to overcome fork issues from within an Apache session