[Admin]

نسخه 7.63 فایروال csf منتشر شد

تغییرات این نسخه:

Modified Server Check to highlight PHP v5.3.* as EOL and therefore a security risk
Port 587 added to TCP_OUT/TCP6_OUT on all new installations (previously only on cPanel)
Added new CLI option to csf, -i –iplookup will lookup IP address geographical information using CC_LOOKUPS setting in /etc/csf/csf.conf
Manually allowed/denied permanent/temporary IPs through the csf CLI now include the CC information if no comment is used
Renamed csf and lfd cron jobs in /etc/cron.d/ to cater for non-LSB compliant Linux cron managers
Modified Server Check report to cater for servers running systemd
More Server Check fixes for out of date checks
Added 2 new alert settings for FTP and SMTP distributed attacks: LF_DISTFTP_ALERT and LF_DISTSMTP_ALERT

در صورت نیاز: آموزش نصب فایروال CSF

[Admin]

نسخه 8.06 فایروال csf منتشر شد

تغییرات:

Added port 24441 to UDP_OUT and UDP6_OUT for new installs on cPanel servers for Pyzor that was added by cPanel in v11.52
Support added for EasyApache4 log locations in cPanel from /etc/cpanel/ea4/paths.conf
Added more executable files to csf.pignore on cPanel servers for cPanel EasyApache4
Modify Server Check to support cPanel EasyApache4
Added regex to support cPanel/WHM login failures with the new log format in v11.52+
If mod_ruid2 is enabled do not check for mod_userdir in Server Check
Always ensure binary exists and is executable before performing processing during Server Check
Modified ProFTPD regex to support more formats
vsftpd inbuilt log file format regex added
Modified cPanel antirelayd Server Check to also support popbeforesmtp added in v11.52
Added dbus and time systemd regexes to csf.logignore for new installs

[Admin]

نسخه 8.07 فایروال csf منتشر شد

تغییرات:

Ensure spaces are stripped from values in /etc/cpanel/ea4/paths.conf on cPanel servers
Fixed issue with csf –add [ip] not always removing [ip] if present from csf.deny
Modified the LF_QOS regex to cater for additional log formats

[Admin]

نسخه 8.08 فایروال csf منتشر شد

تغییرات:

Fixed csf.sips modification via UI on Redhat/CentOS v7.1
Raised csf.blocklist names from 9 to 25 characters long. This cannot be greater due to limits on ipset names on some OS’s and the use of prepended names for new ipset list swapping
Added output from netstat for PT_LOAD to loadalert.txt for new installs. For existing installs, latest file copied to /usr/local/csf/tpl/loadalert.txt.new

[Admin]

نسخه 8.09 فایروال csf منتشر شد (با فاصله زمانی کوتاه دو نسخه 8.10 و 8.11 نیز منتشر شدند.)

تغییرات:

Check /sys/module/ipt_recent/parameters/ip_pkt_list_tot or /sys/module/xt_recent/parameters/ip_pkt_list_tot if defined to allow higher settings for PORTFLOOD than the default of 20 if configured
Added LimitNOFILE to lfd.service on servers using systemd to allow for large numbers of open files
Cater for full stops (.) in ethernet device names
Moved Perl module checks until after csf installation has completed so that all included modules exist in /usr/local/csf/lib/

---

نسخه 8.10 فایروال csf منتشر شد
تغییرات:

Fixed issues with new non-RedHat OS installations by reasserting perl module check to the start of the installation process but removing included modules from checks
Ports 2079 and 2080 added to TCP_IN for new cPanel installs to allow CalDAV/CardDAV access

---

نسخه 8.11 فایروال csf منتشر شد
تغییرات:

Fixed issue on non-RedHat OS installations that failed due to problems whitelisting the installers IP address

[Admin]

نسخه 8.12 فایروال csf منتشر شد
تغییرات:

Additional Feature: Added support for listing ASNs in all Country Code (CC_*) options
Fixed GLOBAL_ALLOW and GLOBAL_DENY when LF_IPSET is enabled
Fixed GLOBAL_DYNDNS when LF_IPSET and LF_IPV6 are enabled
IPSET binary location set to /sbin/ipset for Debian/Ubuntu new installs
Additional regex included for vsftp login failures

[Admin]

نسخه 8.13 فایروال csf منتشر شد
تغییرات:

Added /usr/local/cpanel/3rdparty/php/54/sbin/php-fpm to csf.pignore for cPanel installs
Clarify cluster CLI commands that refer to remote server actions
Added number of failures to the RBL check Subject field
Modified Port Scan checks for more kernel log line formats in regex.pm

[Admin]

نسخه 8.15 فایروال csf منتشر شد

تغییرات:

Added new configuration option IP to point to the IP binary. This will be used in preference to IFCONFIG, the latter is no longer required when the IP binary is correctly configured and executable

Added full UI integration into CentOS Web Panel (CWP).
To disable integration:
Rename: /usr/local/cwpsrv/htdocs/resources/admin/modules/csf.orig.php
to:     /usr/local/cwpsrv/htdocs/resources/admin/modules/csf.php
create: /etc/csf/cwp.disable

Updated Postfix SMTP AUTH regex (thanks to Marcele)
Added support for /etc/csf/csf.blocklists in ZIP format. The zip file MUST only contain a single text file of a single IP/CIDR per line
Added Stop Forum Spam (ZIP) example to csf.blocklists
Added IPV6 support to csf.sips
Fixed detection of ip6tables nat
Removed development code for ispconfig from distribution as this should NOT be used. It has never been implemented nor released as a supported solution and is likely to be insecure. Upgrading will remove any installations of this development code

---

نسخه 8.16 فایروال csf منتشر شد

تغییرات:

Removed UI integration from CentOS Web Panel as recent permission changes break the implementation. The csf installer will restore the original functionality

[Admin]

نسخه 8.17 فایروال csf منتشر شد
تغییرات:

Fixed 12 month statistics pie chart rendering
Increased default value and sanity range for PT_USERMEM
Modified SMTP_BLOCK to use iptables multiport
Added new feature: SMTP_REDIRECT. This redirects non-authorised outbound SMTP connections to the local SMTP server
Ensure LF_PERMBLOCK IP’s are removed from csf.tempip when rotating csf.deny after reaching DENY_IP_LIMIT
Remove stale csf.tempip entries on lfd startup
Added IPv6 support to RT_LOCALHOSTRELAY tracking
Update binary locations for new installations on DirectAdmin Debian
Improved fix for detection of ip6tables nat chains
Added UI Firewall Configuration On/Off buttons
Added UI Firewall Configuration dropdowns for some value ranges
Updated UI restricted list
Updated sanity checks
Various UI updates and modifications
Added a warning when using mod_cloudflare to Server Check Report

-----

نسخه 8.18 فایروال csf منتشر شد
تغییرات:

Reversed csf.tempip changes to avoid a possible locking issue in csf.pl, lfd.pl changes retained

-----

نسخه 8.19 فایروال csf منتشر شد
تغییرات:

Move SMTP_BLOCK rules to a separate chain to avoid conflicts with other control panels deleting required rules

[Admin]

نسخه 8.20 فایروال csf منتشر شد
تغییرات:

Modify Relay Alert email to specify “localhost” rather than “Local Account” when localhost IPv6 address detected as it currently does for IPv4 localhost
Improvement to lfd restart routine for MailScanner and pure-ftpd when cPanel upgrades on RHEL/CentOS/CloudLinux v7+ servers

-----

نسخه 8.21 فایروال csf منتشر شد
تغییرات:

Modified cPanel version check to avoid restart loop if GENERIC set to 1 in csf.conf