General

New csf v9.14

Changes:

  • Fixed LOGSCANNER logging to only report to the log if DEBUG enabled
  • Added new BETA options WAITLOCK and WAITLOCK_TIMEOUT which provide support for the iptables –wait option
  • Added UI support for cxs with Bootstrap

New csf v9.13

Changes:

  • Modify Server Check to prevent hanging process for CloudLinux PHP versions prior to v5.2

New csf v9.12

Changes:

  • Improved LOGSCANNER accuracy of hourly and daily runs between restarts
  • Added more binaries on cPanel servers to csf.pignore for cPanel v60
  • Fixed repeated check for PHP open_basedir in Server Check
  • Do not perform suexec check if mod_ruid2 enabled in Server Check
  • Corrected text description of IPv6 port lists in non-cPanel csf.conf
  • Export ConfigServer::Logger::logfile
  • Detect mpm_itk_module and treat in a similar manner to ruid2_module in Server Check
  • Removed use of Cpanel::cPanelFunctions as it is now being withdrawn
  • Updated common ConfigServer UI
  • Fix instance where cluster block timeout for temporary blocks was not being sent
  • Check for EOL PHP v5.5 in Server Check
  • Added detection of alt-php versions provided by CloudLinux, but do not check them for EOL version status

New cxs v6.16

Changes:

  • Removed use of Cpanel::cPanelFunctions as it is now being withdrawn
  • Check pid rather than using pidof for cxswatch UI status
  • Updated common ConfigServer UI

New cxs v6.15

Changes:

  • Fixed issue with ignoring Fingerprints
  • Exploit fingerprint definitions database additions

New csf v9.11

Changes:

  • Fixed issue with csf.allow Include checks when allowing an IP
  • Added the Greensnow blocklist to csf.blocklists for new installs
  • Fixed display of ports in CLI temporary blocks
  • Fixed issue removing CIDR blocks via the CLI from csf.deny

New cxs v6.14

Changes:

  • Modified ModSecurity integration Install/Remove options in cxs UI for EA4 as cPanel has moved files to a different directory

New csf v9.10

Changes:

  • Fix profile diff in the CLI
  • Fixed issue with deny removal by IP address of advanced rules in the CLI

New csf v9.09

Changes:

  • Additional fix for ip6tables MESSENGER service when LF_IPSET not enabled (ip6tables nat)

New csf v9.08

Changes:

  • AUTOSHUN list removed from csf.blocklists as the public list is no longer available
  • Added support for ip6tables MESSENGER service when LF_IPSET not enabled (ip6tables nat)