Server Software and Configuration Services
Changes: Increased PT_USERMEM default to 200 from 100 for new installations Fixed bug introduced in 5.04 when checking the GLOBAL_ALLOW list for report generation in lfd which caused lfd to fail in Net::CIDR::Lite
Changes: Updated the Server Check report IPv6 text Fixed ip6tables command execution in iptables firewall during startup New
Changes: Added BETA IPv6 support. See csf.conf for more information on the new settings: IPV6 IP6TABLES IPV6_ICMP_STRICT IPV6_SPI TCP6_IN TCP6_OUT UDP6_IN UDP6_OUT New CLI option csf –status6 (csf -l6) added to list ip6tables rules Changed temporary DENY and ACCEPT working…
Changes: Fixed issue introduced in v1.26 that prevented ignoring of hdir and hfile options in an ignore file
Changes: Skip processing a home directory of / whe using –all Exploit regex definitions database additions Exploit fingerprint definitions database additions New
We have tested and confirmed functionality of csf on the latest Ubuntu 10.04 LTS.
Changes: Added new option LF_DISTATTACK_UNIQ so that you can specify how many unique IP addresses are required to trigger LF_DISTATTACK Added new options LF_DISTFTP, LF_DISTFTP_UNIQ and LF_DISTFTP_PERM. This option will keep track of successful FTP logins. If the number of…
Changes: Added new options X_ARF, X_ARF_FROM and X_ARF_TO which allows sending X_ARF reports (see ). See csf.conf for more information Added new options SMTP_ALLOWUSER and SMTP_ALLOWGROUP so that users and groups that can bypass SMTP_BLOCK can be easily added. These…
Changes: Improved handling of –decode failures Exploit regex definitions database additions Exploit fingerprint definitions database additions
Changes: Added a new 7th argument to BLOCK_REPORT that includes the log lines that triggered the block (excludes LF_NETBLOCK and LF_PERMBLOCK) Added new CLI option csf –tempallow (csf -ta) which works in exactly the same way as csf –tempdeny (csf…