CSF is being discontinued

Does the Virtualmin team have any recommendations as to how to deal with the csf de-commissioning problem ?

I highly recommend you disable automatic CSF updates!

And, as long as everything’s running smoothly, you don’t need to worry about replacing the CSF right now.

But if you set up a new server, stick to our suggested defaults—FirewallD and Fail2Ban.

2 Likes

I used CSF a lot.
The function to whitelist my home IP via DDNS and still have all other ports to the internet closed was really nice.
So the internet would only see Port 80/443 and the email ports but from my home I coudl still use every other port… very nice.
Maybe this funktion could be ported to Virtualmin?

1 Like

We already have this option in the FirewallD module and it can also be blocked with a specified timeout.

1 Like

On the positive side, at least it might get some updates such as

  • ASN blocking as an option in addition to existing whole CC blocks
  • using ipinfo data (free) rather than maxmind
  • probably a lot more suggestions but they removed their forum (probably accessible via waybackmachine)

if someone with the skills takes it on.

An alternative to csf, free and long term support

Where is the GitHub repo for this fork?

1 Like

Also, who is behind it? There seems to be very little information on their site..

My guess is @Biggyalecs from the looks of it.

it seems that a company(?) called mentenantapc.ro is maintaining it.
and like csf, tgz distributed in httpx://download.linuxshield.net/csf.tgz

I’m sticking with my assessment. Today the membership is 3 but yesterday it was 2. Looks like someone trying to gain some traction but I don’t see the support behind it. @Biggyalecs Care to confirm or deny? I’m not saying I disapprove but this has to prove stable before the @Ilia is going to spend time on it.

Spend time on what?

I think we have to hang tight to see which CSF project everyone coalesse around.

1 Like

@Jamie, what are your thoughts on it?

Integrating that particular fork.

I’d think at some point it is popular enough that someone(s) with the proper ‘chops’ to maintain it will come along

You could use it as a promotional tool, maybe?

Yeah, this is what I just told Jamie in a private chat.

I stopped using CSF during my last server migration, but the only reason I gave it a shot years ago was because of the Virtualmin plugin…

Not sure I would go back, but CSF support would have great bragging rights… and would likely draw more people into the “*min” world…

1 Like

IMHO it would be nice to support CSF and take on maintenance, BUT also it would be a significant workload. I feel like it’s better to wait and see if someone or some group from the CSF user’s community takes on ownership instead.