Skip to content
Changes:
Code review – started addressing perl critic suggestions in all scripts and modules
Ensure all file opens are properly flocked
Removed Bareword file handles
Localised SIGNALs
Enabled strict module
Newly modified modsec.conf files are now wrapped within <IfModule mod_security2.c> </IfModule>
Installer checks existing modsec.conf files and wraps them as above
Updated cPanel documentation link in cmc help
Changes:
Fix profile diff in the CLI
Fixed issue with deny removal by IP address of advanced rules in the CLI
Changes:
Additional fix for ip6tables MESSENGER service when LF_IPSET not enabled (ip6tables nat)
Changes:
AUTOSHUN list removed from csf.blocklists as the public list is no longer available
Added support for ip6tables MESSENGER service when LF_IPSET not enabled (ip6tables nat)
Changes:
Fixed some incorrect file locks
Removed Bareword file handles
Changes:
Fixed removal of complex allow and deny rules
Fixed IPv6 implementation of CC_ALLOW_PORTS_* and CC_DENY_PORTS_*
Fixed file upload in cse via the integrated UI
Fixed “csf –cfile [file]”
Removed setting: OLD_REAPER
Localised SIGNALs
Localised uid and gid change in MESSENGER
Removed Bareword file handles
Where ip6tables <= v1.3.5 and IPV6 is enabled, disable USE_CONNTRACK if enabled as ip6tables does not support the conntrack module in older versions. This will force the use of the state module instead
Changes:
Ensure all file opens are properly flocked
Switch to using require instead of eval/use to load runtime modules where possible
Code review – started addressing perl critic suggestions in all scripts and modules
Fixed incorrect –summary when subdomains outside of public_html while using –www
Memory and CPU optimisations
PHP script decoding up to 15% faster
PHP fingerprint regex matching up to 50% faster
postftpup converted to a cPanel Hook
Exploit fingerprint definitions database additions
Changes:
Improvement to backported exim hook
Changes:
Fixed missing “none” entry in from distribution provided file virus.scanners.conf which can affect new installs
Changes:
Fixed incorrect inclusion of cPanel Free SSL service include entries on new non-cPanel installations