Skip to content
Changes:
AUTOSHUN list removed from csf.blocklists as the public list is no longer available
Added support for ip6tables MESSENGER service when LF_IPSET not enabled (ip6tables nat)
Changes:
Fixed some incorrect file locks
Removed Bareword file handles
Changes:
Fixed removal of complex allow and deny rules
Fixed IPv6 implementation of CC_ALLOW_PORTS_* and CC_DENY_PORTS_*
Fixed file upload in cse via the integrated UI
Fixed “csf –cfile [file]”
Removed setting: OLD_REAPER
Localised SIGNALs
Localised uid and gid change in MESSENGER
Removed Bareword file handles
Where ip6tables <= v1.3.5 and IPV6 is enabled, disable USE_CONNTRACK if enabled as ip6tables does not support the conntrack module in older versions. This will force the use of the state module instead
Changes:
Ensure all file opens are properly flocked
Switch to using require instead of eval/use to load runtime modules where possible
Code review – started addressing perl critic suggestions in all scripts and modules
Fixed incorrect –summary when subdomains outside of public_html while using –www
Memory and CPU optimisations
PHP script decoding up to 15% faster
PHP fingerprint regex matching up to 50% faster
postftpup converted to a cPanel Hook
Exploit fingerprint definitions database additions
Changes:
Improvement to backported exim hook
Changes:
Fixed missing “none” entry in from distribution provided file virus.scanners.conf which can affect new installs
Changes:
Fixed incorrect inclusion of cPanel Free SSL service include entries on new non-cPanel installations
Changes:
Fixed RT_AUTHRELAY_LIMIT detection
Changes:
Fixed issue with custom regex rules where log hash was not being passed to regex.custom.pm
Fixed issue with custom regex rules where “use strict” was used incorrectly
Changes:
Fixed issue with LF_ALERT_TO and LF_ALERT_FROM not being used when set