New cxs v6.37

Changes:

  • Changed –force into a boolean, i.e. –[no]force
  • Ensure –upgrade ignores force=1 in /etc/cxs/cxs.defaults unless –force used on CLI
  • Prevent upgrade loop if force=1 in /etc/cxs/cxs.defaults

New csf v10.09

Changes:

  • Added new option DROP_OUT which is set to “REJECT” by default. This option sets the default target for blocked outgoing ports. See csf.conf for more information
  • Added improved detection of xtables lock and recommend enabling WAITLOCK on error
  • Improved csf down detection when xtables lock in effect and WAITLOCK is not enabled
  • Added support for listing ASNs in CC_IGNORE