Server Software and Configuration Services
Changes: Create/modify /scripts/posteasyapache to rename the script out of the way if the option to Disable it is used (you may need to enable and disable the option on existing installations to create the /scripts/posteasyapache entry) Added a timed…
A new version of ClamAV has been released: can upgrade to this new versions through MSFE.
Changes: lfd Clustering, final release. This new set of options (CLUSTER*) in csf.conf allows the configuration of an lfd cluster environment where a group of servers can share blocks and, via the CLI, configuration option changes, allows and removes. See…
Changes: Improvements to –decode [file] Add the cxs command line to a report even if the scan report is empty Exploit regex definitions database additions Exploit fingerprint definitions database additions
Changes: Fixed a false-positive detection of c/c++ source files Added filename legend to View option UI in Other Files For single or multiple user scans, Symlinks within the homedir will now be ignored Removed [\;\|\`\\] regex checks from the [f]…
Changes: Improved csf locking to enhance the integrity of the firewall Log lfd csf deny failures New SSHD regex added Improved the dovecot regex’s New Beta option: lfd Clustering. This new set of options (CLUSTER*) in csf.conf allows the configuration…
Changes: Fixed –options [D] output not going to a –report [file] Improvement to –decode [file] variable detection Exploit fingerprint definitions database additions
Changes: Added UID check to ensure updates are only performed by root (UID=0) New –options [D]. This is an experimental option that puts any PHP scripts containing an eval() function that decodes base64 and rot13 data through the (experimental) –decode…
Changes: Improvements to regex definitions database Added new ignore options for sym:, psym: and hsym: to allow ignoring of symlinks Modified –generate to add sym: for symlinks to ignore file All UI user selections modified to be dropdown lists Exploit…
Changes: Fixed bug preventing csf from blocking FTP IP addresses when –block used Added failure message from csf to FTP email if deny fails Added new exploit scanning option W to be used with –option (must be explicitly added to…