Configserver and Firewall documentation

references https://configserver.com/ however the original owners no longer support the product(s).

There are forks of CSF on github.

The staff are well aware of this one :smiley: . I know they are keeping an eye on the forks that have appeared but a leader needs to present itself because there are so many forks.

I’m not keeping an eye on it. I don’t use it, and don’t really recommend it for a web server, so I pay it no attention. Ilia likes it, though, so he’s probably paying attention.

Sorry, my post was really about the documentation (as per the topic subject) as it links to the currently non populated CSF website and potentially if a nefarious actor obtains the domain, they could use incoming links for infected downloads.

While optional, it really helps if Insiders participants report
any bugs they find by opening a ticket on our Github:
https://github.com/Aetherinox/csf-firewallWhile optional, it really helps if Insiders participants report

This setting controls which TCP ports are allowed to accept incoming
connections. By default, these ports are open to enable standard services
to function correctly on the server.

A larger list can be found at:
https://docs.configserver.dev/usage/cheatsheet/ports/

I also prefer the CSF and its use.
Above are the links to get the necessary elements.
They regularly develop and improve the CSF.
Updates are normally sent.

I’m not using it anymore either. I use the Webmin nftables module instead. :slight_smile:

Nevertheless, I was planning to check in on it and see how things are going. I remember they made some changes that broke fairly complex UI integration with their original Webmin module.

I may take another look at that tomorrow.

Also, I believe this is the most active fork:

CSF is great for quick country and ASN bans via their GUI, amongst other features like their modsecurity and temp IP ban interface, although an interface to auto submit to the abuseipdb website would be nifty.

The maxmind geolite2 CSF uses is lacking though. I banned country code PK and found some PK IP’s weren’t in the maxmind database but were in ipinfo lite DB (which is free and unlimited).

Difficult to trust any of the github forks - except for the cPanel one but that’s not being updated.

Seems CSF is dead here, doco is out of date, links to dead site. No official CSF alternative here, either inhouse or external.

A pity as I’ve only recently realised the depth of the product and how easy it is to use, well except for the time I installed it a year or so ago in Webmin and then I couldn’t access the server - not sure why*. Maybe fail2ban or something else was still running. IP was whitelisted.
At least I can still use it on cPanel.

Possibly the closest to original way to the web version:
github. com/centminmod/configserver-scripts/blob/main/README-gpl-csf.md

  • I did copy some errors at the time of install:

mode of ‘/etc/csf/pt_deleted_action.pl’ retained as 0700 (rwx------)
chmod: cannot access ‘/etc/csf/.cgi’: No such file or directory
failed to change mode of '/etc/csf/
.cgi’ from 0000 (---------) to 0000 (---------)
mode of ‘/etc/csf/remove_apf_bfd.sh’ retained as 0700 (rwx------)
mode of ‘/etc/csf/uninstall.sh’ retained as 0700 (rwx------)
chmod: cannot access ‘/etc/csf/.php’: No such file or directory
failed to change mode of '/etc/csf/
.php’ from 0000 (---------) to 0000 (---------)
chmod: cannot access ‘/etc/csf/.py’: No such file or directory
failed to change mode of '/etc/csf/
.py’ from 0000 (---------) to 0000 (---------)
mode of ‘/etc/csf/webmin/csf/index.cgi’ changed from 0600 (rw-------) to 0700 (rwx------)
mode of ‘/etc/cron.d/lfd-cron’ changed from 0755 (rwxr-xr-x) to 0644 (rw-r–r–)
mode of ‘/etc/cron.d/csf-cron’ changed from 0755 (rwxr-xr-x) to 0644 (rw-r–r–)
‘csget.pl’ → ‘/etc/cron.daily/csget’
Can’t locate diagnostics.pm in @INC (you may need to install the diagnostics module) (@INC contains: /usr/libexec/webmin /usr/local/lib64/perl5/5.32 /usr/local/share/perl5/5.32 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5) at /etc/cron.daily/csget line 9.
BEGIN failed–compilation aborted at /etc/cron.daily/csget line 9.
mode of ‘auto.generic.pl’ changed from 0755 (rwxr-xr-x) to 0700 (rwx------)
‘/etc/csf/csf.conf’ → ‘/var/lib/csf/backup/1732519981_pre_v14_22_upgrade’

15.10 can be found here. Feb 28 2026

in one of the change logs, noticed a good update

Thanks for the heads-up! I have updated documentation page:

Also, I will check and fix the old code reference on the Authentic Theme side so it doesn’t point to the retired configserver.com domain.

:statue_of_liberty: upd:

Original post still relevant about doco being out of date and referencing a dead website:

Thanks! It will be fixed when @Jamie rebuilds webmin.com.