Parameterise calls to system and Open3 where possible
HTTP::Tiny upgraded to v0.039
Modifications to csftest.pl
Removed the UI “Pre-configured settings for Low, Medium or High” as they are outdated and meaningless. Users should go through the csf configuration and setup the firewall for their individual server needs
Translate ampersand for HTML output
Modified csf.blocklist for new installations to use the SSL URL for the TOR exit list now that they have forced redirection from the non-SSL URL, with a note to change URLGET to use LWP
Modified csf.blocklist for new installations to specify an alternative TOR exit node list
Added new option URLGET – This option can be used to select either HTTP::Tiny or LWP::UserAgent to retrieve URL data. HTTP::Tiny is faster than LWP::UserAgent and is included in the csf distribution. LWP::UserAgent may have to be installed manually, but it can better support https:// URL’s. HTTP::Tiny is selected by default
Removed extraneous bracket in UI output when reporting errors in user supplied data
Added new options LF_EXIMSYNTAX, LF_EXIMSYNTAX_PERM – These will block IP addresses producing repeated exim syntax errors, typically seen from: spammers, hackers and broken MUAs and MTAs. This option is enabled by default
Load DYNDNS and GLOBAL_DYNDNS from last known values when restarting csf instead of waiting for lfd to load the initial rules
Improved performance of file slurping
Cluster documentation correction in readme.txt
UI button style modifications
Added specific check for Spamhaus drop lists so that retrieval is never attempted beofer 2 hours elapses between attempts whether those retrieval attempts are successful or not
Improvements to SSHD regexes
Modified mod_security logging to include the last triggered rule id if present
