New csf v4.04

Changes:

• Fixed problem with rule placement for ETH_DEVICE_SKIP
• Ensure all ALLOW requests are inserted before DENY requests after csf has been restarted
• Ensure that fwlogwatch stats creation uses IPTABLES_LOG file
• Only perform operations on the nat table if MESSENGER service is enabled
• lfd Process Tracking will now ignore MESSENGER_USER messenger services
• Added new option PT_ALL_USERS so that all Linux accounts on a cPanel server are checked in Process Tracking, not just cPanel users. This option is disabled by default on cPanel servers. Enabling this option may require adding exceptions to csf.pignore
• Additional exceptions added to csf.pignore for cPanel servers for the new PT_ALL_USERS option
• PT_SKIP_HTTP now disabled by default for new installations
• Added PT_ALL_USERS and PT_SKIP_HTTP checks to the WHM Server Check