General

New csf v10.24

Changes:

  • On webmin servers, added csf.body file to UI skinning (STYLE_CUSTOM). See readme.txt for more information

New cxs v6.991

Changes:

  • Fixed issue when using a cxs.bayes.local database which caused cxswatch to reload the bayes database repeatedly
  • Additions to Script Version Scanning

New cxs v6.99

Changes:

  • New BETA feature: IP Reputation System. The system provides a variety of IP blocklists gathered from information that is submitted by participating servers. This dual aspect provides the information to help protect the server using the reputation from active attacks. See POD under “IP Reputation System” for more information
  • Added URI::Escape as a required module

New csf v10.23

Changes:

  • On cPanel servers, ensure that the csf driver for WHM is removed on uninstall
  • Added hooks for upcoming cxs IP Reputation Service
  • On non-cPanel servers, added csf.htmltag and csf.bodytag files to UI skinning (STYLE_CUSTOM). See readme.txt for more information
  • MESSENGERV2 released as stable on cPanel servers. This uses the Apache http daemon to provide the web service for MESSENGER HTML and HTTPS
  • Additions to csf.logignore on new installs
  • Added IPv6 support to BLOCKLISTS
  • Added Spamhaus DROPv6 and Stop Forum Spam IPv6 blocklists to csf.blocklists
  • Removed Spamcannibal and added all.s5h.net from/to csf.rbls
  • Fixed issues with IPv6 rule creation attempts when IPV6 disabled
  • Automatically enable WAITLOCK on initial installation if supported

New csf v10.22

Changes:

  • Fixed issue with the ModSecurity regex modification in v10.20

New csf v10.21

Changes:

  • Ensure /etc/logrotate.d/lfd is overwritten on upgrade

New csf v10.20

Changes:

  • Prevent lfd logrotate from erroring if log files missing
  • Modified Apache ModSecurity regex to cater for changes in logging format on cPanel servers with ModSecurity v2.9.2
  • Modified Apache cxs regex to cater for changes in logging format on cPanel servers with
  • ModSecurity v2.9.2
  • Ensure destination files are owned by root during installation

New csf v10.19

Changes:

  • MESSENGERV2: Take a copy of the live certs and keys and use these in csf.messenger.conf to work around changing filenames for keys and certs when they are regenerated which causes httpd to fail. This is done each time lfd restarts
  • Added CLI option csf –mregen: MESSENGERV2 /etc/apache2/conf.d/csf_messenger.conf regeneration. This will also gracefully restart httpd

New csf v10.18

Changes:

  • Stability improvements to the UI daemon
  • Fixed MESSENGER log entry spelling