General

New OSM v1.23

Changes:

  • Fixed ability to ignore src and/or dst IP address during packet inspection

New csf v14.01

Changes:

  • Changed mailman listings in csf.pignore on cPanel servers to cater for changes in python versions in RHEL v6/7 and 8
  • Fixed issue with CC_ALLOW_FILTER when not using IPSET but using SAFECHAINUPDATE would cause the new chain to be created in the wrong place by lfd when the zone is retrieved/updated
  • Fixed issue when using CC_ALLOW_FILTER with IPSET enabled not adding the final DROP rule in lfd
  • Further modifications to support RHEL/CentOS v8
  • Fixed issues with MESSENGER and CLUSTER server listeners terminating prematurely

New csf v14.00

Changes:

  • Added alternative database for Country Code Lists and Settings. These do not currently require logins/keys and in some cases are better optimised. A new setting CC_SRC allows switching between sources. For new installations these new sources are used. Existing installations are configured to continue to use the MaxMind databases. See the “Country Code Lists and Settings” section in /etc/csf/csf.conf for detailed information
  • Added binary locations for CURL and WGET which will be tried if data retrieval fails when using the LWP perl module, e.g. on outdated OS’s
  • Added new option for URLGET setting “3”. This allow the use of either CURL or WGET instead of the perl modules

New cxs 11.14

Changes:

  • Modified CyberPanel installation to support move to python3

New csf v13.12

Changes:

  • Modified CyberPanel installation to support move to python3

New csf v13.11

Changes:

  • Fixed interdependence issue between Country Code lookups and Country Code filters in lfd introduced in v13.09
  • Improved MM_LICENSE_KEY error messages

New csf v13.10

Changes:

  • Removed hard-coded date from MaxMind ASN url

New csf v13.09

Changes:

  • Due to MaxMind changing their free download policy to require signup and a license key, a new option MUST be configured to continue to use Country Code lookups (CC_LOOKUPS). The option MM_LICENSE_KEY must be set to the key obtained from the MaxMind site. See:

    https://blog.maxmind.com/2019/12/18/significant-changes-to-accessing-and-using-geolite2-databases/

    https://www.maxmind.com/en/geolite2/signup

    Note: Existing installations will continue to use downloaded d/b’s from before the MaxMind change, though may be cleared after CC_INTERVAL

  • Changed CC_LOOKUPS option 4 from freegeoip.net to db-ip.com as the former no longer exists
  • Fixed System Stats graphs not displaying on CyberPanel
  • Updated csf control panel reporting in version display

New cxs v11.13

Changes:

  • Fixed issue with master fingerprint ignore

New cxs v11.12

Changes:

  • Fixed issue with HTML report output sanitisation which caused cxs Watch child to die and break HTML email report rendering
  • Additional improvements to HTML report output sanitisation