Skip to content
Changes:
- Fixed LOGSCANNER logging to only report to the log if DEBUG enabled
- Added new BETA options WAITLOCK and WAITLOCK_TIMEOUT which provide support for the iptables –wait option
- Added UI support for cxs with Bootstrap
Changes:
- Modify Server Check to prevent hanging process for CloudLinux PHP versions prior to v5.2
Changes:
- Improved LOGSCANNER accuracy of hourly and daily runs between restarts
- Added more binaries on cPanel servers to csf.pignore for cPanel v60
- Fixed repeated check for PHP open_basedir in Server Check
- Do not perform suexec check if mod_ruid2 enabled in Server Check
- Corrected text description of IPv6 port lists in non-cPanel csf.conf
- Export ConfigServer::Logger::logfile
- Detect mpm_itk_module and treat in a similar manner to ruid2_module in Server Check
- Removed use of Cpanel::cPanelFunctions as it is now being withdrawn
- Updated common ConfigServer UI
- Fix instance where cluster block timeout for temporary blocks was not being sent
- Check for EOL PHP v5.5 in Server Check
- Added detection of alt-php versions provided by CloudLinux, but do not check them for EOL version status
Changes:
- Removed use of Cpanel::cPanelFunctions as it is now being withdrawn
- Check pid rather than using pidof for cxswatch UI status
- Updated common ConfigServer UI
Changes:
- Fixed issue with ignoring Fingerprints
- Exploit fingerprint definitions database additions
Changes:
- Fixed issue with csf.allow Include checks when allowing an IP
- Added the Greensnow blocklist to csf.blocklists for new installs
- Fixed display of ports in CLI temporary blocks
- Fixed issue removing CIDR blocks via the CLI from csf.deny
Changes:
- Modified ModSecurity integration Install/Remove options in cxs UI for EA4 as cPanel has moved files to a different directory
Changes:
- Fix profile diff in the CLI
- Fixed issue with deny removal by IP address of advanced rules in the CLI
Changes:
- Additional fix for ip6tables MESSENGER service when LF_IPSET not enabled (ip6tables nat)
Changes:
- AUTOSHUN list removed from csf.blocklists as the public list is no longer available
- Added support for ip6tables MESSENGER service when LF_IPSET not enabled (ip6tables nat)