General

New cxs v6.15

Changes:

  • Fixed issue with ignoring Fingerprints
  • Exploit fingerprint definitions database additions

New csf v9.11

Changes:

  • Fixed issue with csf.allow Include checks when allowing an IP
  • Added the Greensnow blocklist to csf.blocklists for new installs
  • Fixed display of ports in CLI temporary blocks
  • Fixed issue removing CIDR blocks via the CLI from csf.deny

New cxs v6.14

Changes:

  • Modified ModSecurity integration Install/Remove options in cxs UI for EA4 as cPanel has moved files to a different directory

New csf v9.10

Changes:

  • Fix profile diff in the CLI
  • Fixed issue with deny removal by IP address of advanced rules in the CLI

New csf v9.09

Changes:

  • Additional fix for ip6tables MESSENGER service when LF_IPSET not enabled (ip6tables nat)

New csf v9.08

Changes:

  • AUTOSHUN list removed from csf.blocklists as the public list is no longer available
  • Added support for ip6tables MESSENGER service when LF_IPSET not enabled (ip6tables nat)

New cxs v6.13

Changes:

  • Fixed some incorrect file locks
  • Removed Bareword file handles

New csf v9.07

Changes:

  • Fixed removal of complex allow and deny rules
  • Fixed IPv6 implementation of CC_ALLOW_PORTS_* and CC_DENY_PORTS_*
  • Fixed file upload in cse via the integrated UI
  • Fixed “csf –cfile [file]”
  • Removed setting: OLD_REAPER
  • Localised SIGNALs
  • Localised uid and gid change in MESSENGER
  • Removed Bareword file handles
  • Where ip6tables <= v1.3.5 and IPV6 is enabled, disable USE_CONNTRACK if enabled as ip6tables does not support the conntrack module in older versions. This will force the use of the state module instead

New cxs v6.11

Changes:

  • Ensure all file opens are properly flocked
  • Switch to using require instead of eval/use to load runtime modules where possible
  • Code review – started addressing perl critic suggestions in all scripts and modules
  • Fixed incorrect –summary when subdomains outside of public_html while using –www
  • Memory and CPU optimisations
  • PHP script decoding up to 15% faster
  • PHP fingerprint regex matching up to 50% faster
  • postftpup converted to a cPanel Hook
  • Exploit fingerprint definitions database additions

New csf v9.06

Changes:

  • Fixed incorrect inclusion of cPanel Free SSL service include entries on new non-cPanel installations