General

New csf v4.20

Changes:

  • Modified csf.tempban processing code in lfd to perform more stringent file locking to preserve temporary bans if lfd is writing during shutdown
  • Modified Port Scan tracking of IP’s to not attempt multiple blocks on the same IP address in the same log line processing batch
  • Fixed broken timestamp in lfd.log for dates < 10th of the month
  • Various code modifications to improve performance and stability

New csf v4.19

Anyone running v4.18 of csf should upgrade ASAP to v4.19 as the deadlock situation could lead to lfd hangingChanges:

  • Reverted the tied file changes as they were causing a deadlock situation locking csf.tempban
  • Improved the process tracking detection of deleted executables of running processes

New csf v4.18

Changes:

  • Modified temporary IP address storage to use a tied file to preserve temporary bans if lfd is writing during shutdown

New csf v4.17

Changes:

  • Replaced the use of backticks in csf, lfd and the WHM UI with calls to IPC::Open3
  • Various lfd and csf code improvements and tidy up
  • Ensure lfd parent dies cleanly on error
  • Debug information improved and timer modified to use Time::HiRes for more accuracy

csf on Ubuntu and Mandriva

We have confirmed that generic csf works on:Ubuntu v8.10Mandriva 2009Adding these two to the supported OS list.

New csf v4.16

Changes:

  • Removed port 953 from the TCP and UDP allow lists for new csf installations as it’s not necessary to whitelist as bind listens on the localhost device for such control connections by default
  • Added exe:/usr/sbin/nsd, exe:/usr/libexec/dovecot/pop3-login, exe:/usr/libexec/dovecot/imap-login to new and old cPanel installations csf.pignore to cater for cPanel support for both nsd and dovecot (currently in EDGE)
  • Only use Cpanel::Rlimit if it’s available in WHM UI

New csf v4.15

Changes:

  • Fixed a problem in v4.* where use of GALLOW and ALLOWDYN was allowing connections from blocked IP addresses in csf.deny or temporary blocks. The GALLOW, GDENY and ALLOWDYN chains have been split into GALLOWIN, GALLOWOUT, GDENYIN, GDENYOUT, ALLOWDYNIN and ALLOWDYNOUT to correct this. Many thanks to Brian for his help in tracking this issue down.

New csf v4.14

Changes:

  • Implemented the use of cPanel routine Cpanel::Rlimit to remove process resource limit restrictions as the cPanel memory limitation setting was causing the Server Check to abort with memory allocations problems through WHM on some servers
  • Modified port checking for 23 and 53 in Server Check to no longer use the fuser binary and use the port mappings directly from /proc
  • Modified lfd and Server Check to check for IPv6 bound processes as the IPv4 and IPv6 connections are stored in a different file to IPv4 only bound processes

New csf v4.13

Changes:

  • Updated various comments in csf.conf
  • Fixed call to csfpost.sh from csf