ConfigServer Services Blog

New csf v10.20

Changes:

  • Prevent lfd logrotate from erroring if log files missing
  • Modified Apache ModSecurity regex to cater for changes in logging format on cPanel servers with ModSecurity v2.9.2
  • Modified Apache cxs regex to cater for changes in logging format on cPanel servers with
  • ModSecurity v2.9.2
  • Ensure destination files are owned by root during installation

New MailScanner Front-End (MSFE) v8.10

Changes:

  • Fixed Forget and Block IP modals displaying framed output in WHM MailControl
  • Ensure session is cleared after encountering an error in WHM MailControl
  • Ensure offset is reset on new Search in WHM and cPanel MailControl
  • Prevent installer from overwriting mslang.txt
  • Added new feature – multi-language support for the End-User UI. By default, the end-user MSFE UI defaults to using /usr/mscpanel/mslang.txt. If language specific files are created using /usr/mscpanel/mslang.cc.txt where cc is taken from the cPanel locale, then that language file will be used instead. This way multiple languages can be supported
  • Added Blacklist/Whitelist buttons to email view in WHM MailControl for From address
  • Converted cPanel UI to use cPanel UAPI instead of the deprecated Api1
  • Added new MailControl setting to allow the Search Messages box to always show at the top of the page
  • Added new MailControl setting to allow the Bulk Actions box to always show at the bottom of the page

New csf v10.19

Changes:

  • MESSENGERV2: Take a copy of the live certs and keys and use these in csf.messenger.conf to work around changing filenames for keys and certs when they are regenerated which causes httpd to fail. This is done each time lfd restarts
  • Added CLI option csf –mregen: MESSENGERV2 /etc/apache2/conf.d/csf_messenger.conf regeneration. This will also gracefully restart httpd

New cmc v3.00

Changes:

  • Modified and simplified output to use both top-level and LocationMatch wildcard SecRuleRemoveById statements to cover both types of rule. Existing conf files are only updated once they have been changed via the UI
  • Added warning to files that cmc creates to not modify them manually and then use cmc, as they will be overwritten
  • Removed old migration code
  • Updated cPanel Documentation URL in Help to point to EA4 information

New csf v10.17

Changes:

  • Prevent Cluster and UI daemons from terminating the main process if they themselves terminate
  • Modify Cluster and UI daemons to restart if they are stopped or fail
  • Modify Cluster and UI daemons to be more verbose about reasons for stopping
  • Fixed typos in readme.txt and csf.conf
  • Added MESSENGER child logging to /var/log/lfd_messenger.log, also for MESSENGERV2 via a new index.recaptcha.php
  • Modified logrotate configuration to include /var/log/lfd_messenger.log

New csf v10.15

Changes:

  • New EXPERIMENTAL feature on cPanel servers: MESSENGERV2. This uses the Apache http daemon to provide the web service for MESSENGER HTML and HTTPS
  • Added new option LF_APACHE_401 that works in a similar way to LF_APACHE_404 and LF_APACHE_403
  • Added new option RECAPTCHA_ALERT. This will send an email when a recaptcha unblock request is attempted by lfd. This option is enabled by default
  • Stability improvements to UI, MESSENGER and CLUSTER daemon processes
  • Added memory usage information to lfd log when using MESSENGER_HTTPS
  • Add limiter to enforce MESSENGER_CHILDREN when connections are waiting for a child process
  • Modify MESSENGER HTML examples for new installs to use inline images to improve page load speed and reduce lfd overheads
  • Modified network interface detection to allow dash (-) in name
  • URL updates in Server Check
  • Increased the default value for MESSENGER_RATE to 100/s (from 30/m) and MESSENGER_BURST to 150 (from 5) for all installations to alleviate slow MESSENGER response times
  • Set the SELinux security context for systemd and executable files
  • Ensure firewalld is masked on systemd servers