How to Install CSF ConfigServer Firewall on your CentOS/Ubuntu/cPanel Server
How to Install CSF ConfigServer Firewall and LFD (Login Failure Daemon) on your CentOS/Ubuntu/cPanel Server
ConfigServer Firewall is one of the most commonly used firewall to secure Linux Servers. It is very easy to Install and configure CSF firewall. It is a very useful firewall to block bruteforce attacks, syn attacks, small DOS attacks etc.
Do the below steps to install CSF firewall on your Linux Server
Log into your Linux Server via SSH as ‘root’. You must have server root access to install CSF
1. Change to directory /usr/local/src using cd command.
2. You can download CSF firewall from configserver.com website using wget command. CSF archive installation file will be saved in /usr/local/src directory
3. Untar the csf installation file (tar Archive File csf.tgz).
4. Execute the CSF installation script install.sh
root@server [/usr/local/src]# wget https://download.configserver.com/csf.tgz
–2016-05-10 12:58:41– https://download.configserver.com/csf.tgz
Resolving download.configserver.com (download.configserver.com)… 85.10.199.177
Connecting to download.configserver.com (download.configserver.com)|85.10.199.177|:443… connected.
HTTP request sent, awaiting response… 200 OK
Length: 690967 (675K) [application/x-gzip]
Saving to: ‘csf.tgz’
100%[==============================================================================================================================>] 690,967 753KB/s in 0.9s
2016-05-10 12:58:43 (753 KB/s) – ‘csf.tgz’ saved [690967/690967]
root@server [/usr/local/src]# tar -xvzf csf.tgz
csf/
csf/csf.deny
csf/reselleralert.txt
csf/csf.directadmin.pignore
csf/csf.service
csf/permblock.txt
csf/csf.1.txt
csf/install.txt
csf/version.txt
csf/csf.c
csf/messenger/
csf/messenger/csf_small.png
csf/messenger/index.html
csf/messenger/index.text
csf/ip.png
csf/syslogalert.txt
csf/connectiontracking.txt
csf/profiles/
csf/profiles/block_all_temp.conf
csf/profiles/disable_alerts.conf
csf/profiles/protection_low.conf
csf/profiles/protection_medium.conf
csf/profiles/protection_high.conf
csf/profiles/block_all_perm.conf
csf/consolealert.txt
csf/Net/
csf/Net/CIDR/
csf/Net/CIDR/Lite.pm
csf/Net/IP/
csf/Net/IP/IP.pm
csf/Net/IP.pm
csf/x-arf.txt
csf/watchalert.txt
csf/csf.smtpauth
csf/license.txt
csf/portknocking.txt
csf/loader.gif
csf/loadalert.txt
csf/lfdcron.sh
csf/sualert.txt
csf/ConfigServer/
csf/ConfigServer/Service.pm
csf/ConfigServer/AbuseIP.pm
csf/ConfigServer/CheckIP.pm
csf/ConfigServer/ServerCheck.pm
csf/ConfigServer/GetEthDev.pm
csf/ConfigServer/GetIPs.pm
csf/ConfigServer/ServerStats.pm
csf/ConfigServer/Config.pm
csf/ConfigServer/RBLCheck.pm
csf/ConfigServer/Sendmail.pm
csf/ConfigServer/Ports.pm
csf/ConfigServer/URLGet.pm
csf/ConfigServer/LookUpIP.pm
csf/ConfigServer/Sanity.pm
csf/ConfigServer/RBLLookup.pm
csf/ConfigServer/Slurp.pm
csf/upgrade.txt
csf/plus.png
csf/logfloodalert.txt
csf/ui/
csf/ui/server.crt
csf/ui/ui.allow
csf/ui/ui.ban
csf/ui/images/
csf/ui/images/cxs.png
csf/ui/images/ip.png
csf/ui/images/viewdelivery.png
csf/ui/images/icon.gif
csf/ui/images/plus.png
csf/ui/images/cxs-loader.gif
csf/ui/images/perm.png
csf/ui/images/deliver.png
csf/ui/images/csf_small.png
csf/ui/images/minus.png
csf/ui/images/LICENSE.txt
csf/ui/images/delete.png
csf/ui/images/cxs_small.png
csf/ui/images/csf-loader.gif
csf/ui/images/cse_small.png
csf/ui/server.key
csf/csf.rbls
csf/exploitalert.txt
csf/csf.logfiles
csf/logalert.txt
csf/csf.help
csf/cseui.pl
csf/os.pl
csf/forkbombalert.txt
csf/csf.uidignore
csf/lfd.pl
csf/pt_deleted_action.pl
csf/lfd.sh
csf/install.sh
csf/csf.blocklists
csf/da/
csf/da/scripts/
csf/da/scripts/update.sh
csf/da/scripts/install.sh
csf/da/scripts/uninstall.sh
csf/da/exec/
csf/da/exec/da_csf.cgi
csf/da/hooks/
csf/da/hooks/admin_img.html
csf/da/hooks/admin_txt.html
csf/da/admin/
csf/da/admin/index.html
csf/da/admin/index.raw
csf/da/plugin.conf
csf/da/images/
csf/da/images/ip.png
csf/da/images/loader.gif
csf/da/images/plus.png
csf/da/images/perm.png
csf/da/images/csf_small.png
csf/da/images/link.jpg
csf/da/images/minus.png
csf/da/images/LICENSE.txt
csf/da/images/delete.png
csf/da/images/csf-loader.gif
csf/csf.pl
csf/auto.pl
csf/readme.txt
csf/lfdcron.directadmin.sh
csf/csf.mignore
csf/resalert.txt
csf/migratedata.sh
csf/perm.png
csf/Geo/
csf/Geo/IP/
csf/Geo/IP/Record.pod
csf/Geo/IP/Record.pm
csf/Geo/Mirror.pm
csf/Geo/IP.pm
csf/csfui.pl
csf/csf.syslogs
csf/csf.redirect
csf/integrityalert.txt
csf/regex.custom.pm
csf/usertracking.txt
csf/relayalert.txt
csf/auto.generic.pl
csf/restricted.txt
csf/csf_small.png
csf/csf.directadmin.conf
csf/netblock.txt
csf/csf.rblconf
csf/csf.signore
csf/uidscan.txt
csf/alert.txt
csf/changelog.txt
csf/HTTP/
csf/HTTP/Tiny.pm
csf/csf.ignore
csf/lfd.logrotate
csf/csf.div
csf/csf.rignore
csf/csf/
csf/csf/ip.png
csf/csf/loader.gif
csf/csf/plus.png
csf/csf/perm.png
csf/csf/csf_small.png
csf/csf/minus.png
csf/csf/LICENSE.txt
csf/csf/delete.png
csf/csf/csf-loader.gif
csf/sshalert.txt
csf/tracking.txt
csf/minus.png
csf/regex.txt
csf/csf.fignore
csf/csf.resellers
csf/cpanel/
csf/cpanel/upgrade.sh
csf/cpanel/csf.cgi
csf/cpanel/csf.conf.old
csf/cpanel/Driver/
csf/cpanel/Driver/ConfigServercsf/
csf/cpanel/Driver/ConfigServercsf/META.pm
csf/cpanel/Driver/ConfigServercsf.pm
csf/cpanel/csf.conf
csf/Crypt/
csf/Crypt/Blowfish_PP.pm
csf/Crypt/CBC.pm
csf/accounttracking.txt
csf/uninstall.directadmin.sh
csf/regex.pm
csf/csf.sh
csf/webmin/
csf/webmin/csf/
csf/webmin/csf/index.cgi
csf/webmin/csf/images/
csf/webmin/csf/images/ip.png
csf/webmin/csf/images/loader.gif
csf/webmin/csf/images/icon.gif
csf/webmin/csf/images/plus.png
csf/webmin/csf/images/perm.png
csf/webmin/csf/images/csf_small.png
csf/webmin/csf/images/minus.png
csf/webmin/csf/images/LICENSE.txt
csf/webmin/csf/images/delete.png
csf/webmin/csf/images/csf-loader.gif
csf/webmin/csf/module.info
csf/csf.dirwatch
csf/csfcron.sh
csf/csf.pignore
csf/csf.sips
csf/auto.directadmin.pl
csf/csf.generic.conf
csf/LICENSE.txt
csf/csfuir.pl
csf/delete.png
csf/version/
csf/version/version.pm
csf/version/version/
csf/version/version/vpp.pm
csf/version/version/regex.pm
csf/remove_apf_bfd.sh
csf/csf.allow
csf/processtracking.txt
csf/webminalert.txt
csf/filealert.txt
csf/lfd.service
csf/csf.logignore
csf/scriptalert.txt
csf/csf.suignore
csf/install.cpanel.sh
csf/csf.conf
csf/uninstall.sh
csf/cpanelalert.txt
csf/queuealert.txt
csf/csfajaxtail.js
csf/portscan.txt
csf/csf.generic.pignore
csf/csf.dyndns
csf/uialert.txt
csf/install.generic.sh
csf/sanity.txt
csf/csf.syslogusers
csf/csftest.pl
csf/uninstall.generic.sh
csf/install.directadmin.sh
root@server [/usr/local/src]# cd csf
root@server [/usr/local/src/csf]# sh install.sh
Selecting installer…
Running csf cPanel installer
Installing csf and lfd
Check we’re running as root
Checking Perl modules…
Using configuration defaults
…Perl modules OK
mkdir: created directory ‘/etc/csf’
mkdir: created directory ‘/var/lib/csf’
mkdir: created directory ‘/var/lib/csf/backup’
mkdir: created directory ‘/var/lib/csf/Geo’
mkdir: created directory ‘/var/lib/csf/ui’
mkdir: created directory ‘/var/lib/csf/stats’
mkdir: created directory ‘/var/lib/csf/lock’
mkdir: created directory ‘/var/lib/csf/webmin’
mkdir: created directory ‘/var/lib/csf/zone’
mkdir: created directory ‘/usr/local/csf’
mkdir: created directory ‘/usr/local/csf/bin’
mkdir: created directory ‘/usr/local/csf/lib’
mkdir: created directory ‘/usr/local/csf/tpl’
‘csf.conf’ -> ‘/etc/csf/./csf.conf’
‘csf.allow’ -> ‘/etc/csf/./csf.allow’
‘csf.deny’ -> ‘/etc/csf/./csf.deny’
‘csf.redirect’ -> ‘/etc/csf/./csf.redirect’
‘csf.resellers’ -> ‘/etc/csf/./csf.resellers’
‘csf.dirwatch’ -> ‘/etc/csf/./csf.dirwatch’
‘csf.syslogs’ -> ‘/etc/csf/./csf.syslogs’
‘csf.logfiles’ -> ‘/etc/csf/./csf.logfiles’
‘csf.logignore’ -> ‘/etc/csf/./csf.logignore’
‘csf.blocklists’ -> ‘/etc/csf/./csf.blocklists’
‘csf.ignore’ -> ‘/etc/csf/./csf.ignore’
‘csf.pignore’ -> ‘/etc/csf/./csf.pignore’
‘csf.rignore’ -> ‘/etc/csf/./csf.rignore’
‘csf.fignore’ -> ‘/etc/csf/./csf.fignore’
‘csf.signore’ -> ‘/etc/csf/./csf.signore’
‘csf.suignore’ -> ‘/etc/csf/./csf.suignore’
‘csf.uidignore’ -> ‘/etc/csf/./csf.uidignore’
‘csf.mignore’ -> ‘/etc/csf/./csf.mignore’
‘csf.sips’ -> ‘/etc/csf/./csf.sips’
‘csf.dyndns’ -> ‘/etc/csf/./csf.dyndns’
‘csf.syslogusers’ -> ‘/etc/csf/./csf.syslogusers’
‘csf.smtpauth’ -> ‘/etc/csf/./csf.smtpauth’
‘csf.rblconf’ -> ‘/etc/csf/./csf.rblconf’
‘alert.txt’ -> ‘/usr/local/csf/tpl/./alert.txt’
‘reselleralert.txt’ -> ‘/usr/local/csf/tpl/./reselleralert.txt’
‘logalert.txt’ -> ‘/usr/local/csf/tpl/./logalert.txt’
‘logfloodalert.txt’ -> ‘/usr/local/csf/tpl/./logfloodalert.txt’
‘syslogalert.txt’ -> ‘/usr/local/csf/tpl/./syslogalert.txt’
‘integrityalert.txt’ -> ‘/usr/local/csf/tpl/./integrityalert.txt’
‘exploitalert.txt’ -> ‘/usr/local/csf/tpl/./exploitalert.txt’
‘queuealert.txt’ -> ‘/usr/local/csf/tpl/./queuealert.txt’
‘tracking.txt’ -> ‘/usr/local/csf/tpl/./tracking.txt’
‘connectiontracking.txt’ -> ‘/usr/local/csf/tpl/./connectiontracking.txt’
‘processtracking.txt’ -> ‘/usr/local/csf/tpl/./processtracking.txt’
‘accounttracking.txt’ -> ‘/usr/local/csf/tpl/./accounttracking.txt’
‘usertracking.txt’ -> ‘/usr/local/csf/tpl/./usertracking.txt’
‘sshalert.txt’ -> ‘/usr/local/csf/tpl/./sshalert.txt’
‘webminalert.txt’ -> ‘/usr/local/csf/tpl/./webminalert.txt’
‘sualert.txt’ -> ‘/usr/local/csf/tpl/./sualert.txt’
‘consolealert.txt’ -> ‘/usr/local/csf/tpl/./consolealert.txt’
‘uialert.txt’ -> ‘/usr/local/csf/tpl/./uialert.txt’
‘cpanelalert.txt’ -> ‘/usr/local/csf/tpl/./cpanelalert.txt’
‘scriptalert.txt’ -> ‘/usr/local/csf/tpl/./scriptalert.txt’
‘relayalert.txt’ -> ‘/usr/local/csf/tpl/./relayalert.txt’
‘filealert.txt’ -> ‘/usr/local/csf/tpl/./filealert.txt’
‘watchalert.txt’ -> ‘/usr/local/csf/tpl/./watchalert.txt’
‘loadalert.txt’ -> ‘/usr/local/csf/tpl/./loadalert.txt’
‘resalert.txt’ -> ‘/usr/local/csf/tpl/./resalert.txt’
‘portscan.txt’ -> ‘/usr/local/csf/tpl/./portscan.txt’
‘uidscan.txt’ -> ‘/usr/local/csf/tpl/./uidscan.txt’
‘permblock.txt’ -> ‘/usr/local/csf/tpl/./permblock.txt’
‘netblock.txt’ -> ‘/usr/local/csf/tpl/./netblock.txt’
‘portknocking.txt’ -> ‘/usr/local/csf/tpl/./portknocking.txt’
‘forkbombalert.txt’ -> ‘/usr/local/csf/tpl/./forkbombalert.txt’
‘x-arf.txt’ -> ‘/usr/local/csf/tpl/./x-arf.txt’
‘regex.custom.pm’ -> ‘/usr/local/csf/bin/./regex.custom.pm’
‘pt_deleted_action.pl’ -> ‘/usr/local/csf/bin/./pt_deleted_action.pl’
‘messenger’ -> ‘/etc/csf/./messenger’
‘messenger/index.html’ -> ‘/etc/csf/./messenger/index.html’
‘messenger/index.text’ -> ‘/etc/csf/./messenger/index.text’
‘messenger/csf_small.png’ -> ‘/etc/csf/./messenger/csf_small.png’
‘ui’ -> ‘/etc/csf/./ui’
‘ui/ui.allow’ -> ‘/etc/csf/./ui/ui.allow’
‘ui/images’ -> ‘/etc/csf/./ui/images’
‘ui/images/plus.png’ -> ‘/etc/csf/./ui/images/plus.png’
‘ui/images/cxs_small.png’ -> ‘/etc/csf/./ui/images/cxs_small.png’
‘ui/images/icon.gif’ -> ‘/etc/csf/./ui/images/icon.gif’
‘ui/images/viewdelivery.png’ -> ‘/etc/csf/./ui/images/viewdelivery.png’
‘ui/images/delete.png’ -> ‘/etc/csf/./ui/images/delete.png’
‘ui/images/ip.png’ -> ‘/etc/csf/./ui/images/ip.png’
‘ui/images/minus.png’ -> ‘/etc/csf/./ui/images/minus.png’
‘ui/images/deliver.png’ -> ‘/etc/csf/./ui/images/deliver.png’
‘ui/images/perm.png’ -> ‘/etc/csf/./ui/images/perm.png’
‘ui/images/cse_small.png’ -> ‘/etc/csf/./ui/images/cse_small.png’
‘ui/images/cxs.png’ -> ‘/etc/csf/./ui/images/cxs.png’
‘ui/images/LICENSE.txt’ -> ‘/etc/csf/./ui/images/LICENSE.txt’
‘ui/images/csf-loader.gif’ -> ‘/etc/csf/./ui/images/csf-loader.gif’
‘ui/images/csf_small.png’ -> ‘/etc/csf/./ui/images/csf_small.png’
‘ui/images/cxs-loader.gif’ -> ‘/etc/csf/./ui/images/cxs-loader.gif’
‘ui/server.crt’ -> ‘/etc/csf/./ui/server.crt’
‘ui/server.key’ -> ‘/etc/csf/./ui/server.key’
‘ui/ui.ban’ -> ‘/etc/csf/./ui/ui.ban’
‘lfd.logrotate’ -> ‘/etc/logrotate.d/lfd’
‘csfcron.sh’ -> ‘/etc/cron.d/csf-cron’
‘lfdcron.sh’ -> ‘/etc/cron.d/lfd-cron’
‘csf.pl’ -> ‘/usr/sbin/csf’
‘lfd.pl’ -> ‘/usr/sbin/lfd’
‘/etc/csf/csf.pl’ -> ‘/usr/sbin/csf’
‘/etc/csf/lfd.pl’ -> ‘/usr/sbin/lfd’
‘/etc/csf/csfui.pl’ -> ‘/usr/local/csf/bin/csfui.pl’
‘/etc/csf/csftest.pl’ -> ‘/usr/local/csf/bin/csftest.pl’
‘/etc/csf/pt_deleted_action.pl’ -> ‘/usr/local/csf/bin/pt_deleted_action.pl’
‘/etc/csf/remove_apf_bfd.sh’ -> ‘/usr/local/csf/bin/remove_apf_bfd.sh’
‘/etc/csf/uninstall.sh’ -> ‘/usr/local/csf/bin/uninstall.sh’
‘/etc/csf/regex.custom.pm’ -> ‘/usr/local/csf/bin/regex.custom.pm’
‘/etc/csf/webmin’ -> ‘/usr/local/csf/lib/webmin’
‘/etc/csf/alerts’ -> ‘/usr/local/csf/tpl’
‘uninstall.sh’ -> ‘/usr/local/csf/bin/uninstall.sh’
‘csfui.pl’ -> ‘/usr/local/csf/bin/csfui.pl’
‘csfuir.pl’ -> ‘/usr/local/csf/bin/csfuir.pl’
‘cseui.pl’ -> ‘/usr/local/csf/bin/cseui.pl’
‘csftest.pl’ -> ‘/usr/local/csf/bin/csftest.pl’
‘regex.pm’ -> ‘/usr/local/csf/bin/regex.pm’
‘remove_apf_bfd.sh’ -> ‘/usr/local/csf/bin/remove_apf_bfd.sh’
‘readme.txt’ -> ‘/etc/csf/readme.txt’
‘sanity.txt’ -> ‘/usr/local/csf/lib/sanity.txt’
‘csf.rbls’ -> ‘/usr/local/csf/lib/csf.rbls’
‘restricted.txt’ -> ‘/usr/local/csf/lib/restricted.txt’
‘changelog.txt’ -> ‘/etc/csf/changelog.txt’
‘install.txt’ -> ‘/etc/csf/install.txt’
‘version.txt’ -> ‘/etc/csf/version.txt’
‘license.txt’ -> ‘/etc/csf/license.txt’
‘webmin’ -> ‘/usr/local/csf/lib/webmin’
‘webmin/csf’ -> ‘/usr/local/csf/lib/webmin/csf’
‘webmin/csf/index.cgi’ -> ‘/usr/local/csf/lib/webmin/csf/index.cgi’
‘webmin/csf/images’ -> ‘/usr/local/csf/lib/webmin/csf/images’
‘webmin/csf/images/plus.png’ -> ‘/usr/local/csf/lib/webmin/csf/images/plus.png’
‘webmin/csf/images/loader.gif’ -> ‘/usr/local/csf/lib/webmin/csf/images/loader.gif’
‘webmin/csf/images/icon.gif’ -> ‘/usr/local/csf/lib/webmin/csf/images/icon.gif’
‘webmin/csf/images/delete.png’ -> ‘/usr/local/csf/lib/webmin/csf/images/delete.png’
‘webmin/csf/images/ip.png’ -> ‘/usr/local/csf/lib/webmin/csf/images/ip.png’
‘webmin/csf/images/minus.png’ -> ‘/usr/local/csf/lib/webmin/csf/images/minus.png’
‘webmin/csf/images/perm.png’ -> ‘/usr/local/csf/lib/webmin/csf/images/perm.png’
‘webmin/csf/images/LICENSE.txt’ -> ‘/usr/local/csf/lib/webmin/csf/images/LICENSE.txt’
‘webmin/csf/images/csf-loader.gif’ -> ‘/usr/local/csf/lib/webmin/csf/images/csf-loader.gif’
‘webmin/csf/images/csf_small.png’ -> ‘/usr/local/csf/lib/webmin/csf/images/csf_small.png’
‘webmin/csf/module.info’ -> ‘/usr/local/csf/lib/webmin/csf/module.info’
‘ConfigServer’ -> ‘/usr/local/csf/lib/ConfigServer’
‘ConfigServer/Service.pm’ -> ‘/usr/local/csf/lib/ConfigServer/Service.pm’
‘ConfigServer/RBLCheck.pm’ -> ‘/usr/local/csf/lib/ConfigServer/RBLCheck.pm’
‘ConfigServer/ServerCheck.pm’ -> ‘/usr/local/csf/lib/ConfigServer/ServerCheck.pm’
‘ConfigServer/Sanity.pm’ -> ‘/usr/local/csf/lib/ConfigServer/Sanity.pm’
‘ConfigServer/RBLLookup.pm’ -> ‘/usr/local/csf/lib/ConfigServer/RBLLookup.pm’
‘ConfigServer/Slurp.pm’ -> ‘/usr/local/csf/lib/ConfigServer/Slurp.pm’
‘ConfigServer/Config.pm’ -> ‘/usr/local/csf/lib/ConfigServer/Config.pm’
‘ConfigServer/CheckIP.pm’ -> ‘/usr/local/csf/lib/ConfigServer/CheckIP.pm’
‘ConfigServer/LookUpIP.pm’ -> ‘/usr/local/csf/lib/ConfigServer/LookUpIP.pm’
‘ConfigServer/AbuseIP.pm’ -> ‘/usr/local/csf/lib/ConfigServer/AbuseIP.pm’
‘ConfigServer/Ports.pm’ -> ‘/usr/local/csf/lib/ConfigServer/Ports.pm’
‘ConfigServer/GetEthDev.pm’ -> ‘/usr/local/csf/lib/ConfigServer/GetEthDev.pm’
‘ConfigServer/GetIPs.pm’ -> ‘/usr/local/csf/lib/ConfigServer/GetIPs.pm’
‘ConfigServer/Sendmail.pm’ -> ‘/usr/local/csf/lib/ConfigServer/Sendmail.pm’
‘ConfigServer/URLGet.pm’ -> ‘/usr/local/csf/lib/ConfigServer/URLGet.pm’
‘ConfigServer/ServerStats.pm’ -> ‘/usr/local/csf/lib/ConfigServer/ServerStats.pm’
‘Net’ -> ‘/usr/local/csf/lib/Net’
‘Net/IP’ -> ‘/usr/local/csf/lib/Net/IP’
‘Net/IP/IP.pm’ -> ‘/usr/local/csf/lib/Net/IP/IP.pm’
‘Net/CIDR’ -> ‘/usr/local/csf/lib/Net/CIDR’
‘Net/CIDR/Lite.pm’ -> ‘/usr/local/csf/lib/Net/CIDR/Lite.pm’
‘Net/IP.pm’ -> ‘/usr/local/csf/lib/Net/IP.pm’
‘Geo’ -> ‘/usr/local/csf/lib/Geo’
‘Geo/IP’ -> ‘/usr/local/csf/lib/Geo/IP’
‘Geo/IP/Record.pm’ -> ‘/usr/local/csf/lib/Geo/IP/Record.pm’
‘Geo/IP/Record.pod’ -> ‘/usr/local/csf/lib/Geo/IP/Record.pod’
‘Geo/Mirror.pm’ -> ‘/usr/local/csf/lib/Geo/Mirror.pm’
‘Geo/IP.pm’ -> ‘/usr/local/csf/lib/Geo/IP.pm’
‘Crypt’ -> ‘/usr/local/csf/lib/Crypt’
‘Crypt/Blowfish_PP.pm’ -> ‘/usr/local/csf/lib/Crypt/Blowfish_PP.pm’
‘Crypt/CBC.pm’ -> ‘/usr/local/csf/lib/Crypt/CBC.pm’
‘HTTP’ -> ‘/usr/local/csf/lib/HTTP’
‘HTTP/Tiny.pm’ -> ‘/usr/local/csf/lib/HTTP/Tiny.pm’
‘version/version’ -> ‘/usr/local/csf/lib/version’
‘version/version/vpp.pm’ -> ‘/usr/local/csf/lib/version/vpp.pm’
‘version/version/regex.pm’ -> ‘/usr/local/csf/lib/version/regex.pm’
‘version/version.pm’ -> ‘/usr/local/csf/lib/version.pm’
‘csf.div’ -> ‘/usr/local/csf/lib/csf.div’
‘csfajaxtail.js’ -> ‘/usr/local/csf/lib/csfajaxtail.js’
‘ui/images/plus.png’ -> ‘/etc/csf/ui/./images/plus.png’
‘ui/images/cxs_small.png’ -> ‘/etc/csf/ui/./images/cxs_small.png’
‘ui/images/icon.gif’ -> ‘/etc/csf/ui/./images/icon.gif’
‘ui/images/viewdelivery.png’ -> ‘/etc/csf/ui/./images/viewdelivery.png’
‘ui/images/delete.png’ -> ‘/etc/csf/ui/./images/delete.png’
‘ui/images/ip.png’ -> ‘/etc/csf/ui/./images/ip.png’
‘ui/images/minus.png’ -> ‘/etc/csf/ui/./images/minus.png’
‘ui/images/deliver.png’ -> ‘/etc/csf/ui/./images/deliver.png’
‘ui/images/perm.png’ -> ‘/etc/csf/ui/./images/perm.png’
‘ui/images/cse_small.png’ -> ‘/etc/csf/ui/./images/cse_small.png’
‘ui/images/cxs.png’ -> ‘/etc/csf/ui/./images/cxs.png’
‘ui/images/LICENSE.txt’ -> ‘/etc/csf/ui/./images/LICENSE.txt’
‘ui/images/csf-loader.gif’ -> ‘/etc/csf/ui/./images/csf-loader.gif’
‘ui/images/csf_small.png’ -> ‘/etc/csf/ui/./images/csf_small.png’
‘ui/images/cxs-loader.gif’ -> ‘/etc/csf/ui/./images/cxs-loader.gif’
‘profiles’ -> ‘/usr/local/csf/profiles’
‘profiles/protection_high.conf’ -> ‘/usr/local/csf/profiles/protection_high.conf’
‘profiles/block_all_temp.conf’ -> ‘/usr/local/csf/profiles/block_all_temp.conf’
‘profiles/disable_alerts.conf’ -> ‘/usr/local/csf/profiles/disable_alerts.conf’
‘profiles/protection_medium.conf’ -> ‘/usr/local/csf/profiles/protection_medium.conf’
‘profiles/protection_low.conf’ -> ‘/usr/local/csf/profiles/protection_low.conf’
‘profiles/block_all_perm.conf’ -> ‘/usr/local/csf/profiles/block_all_perm.conf’
‘csf.conf’ -> ‘/usr/local/csf/profiles/reset_to_defaults.conf’
‘csf.1.txt’ -> ‘/usr/local/man/man1/csf.1’
‘csf.help’ -> ‘/usr/local/csf/lib/csf.help’
mode of ‘/usr/local/csf/bin/cseui.pl’ changed from 0600 (rw——-) to 0700 (rwx——)
mode of ‘/usr/local/csf/bin/csftest.pl’ changed from 0600 (rw——-) to 0700 (rwx——)
mode of ‘/usr/local/csf/bin/csfui.pl’ changed from 0600 (rw——-) to 0700 (rwx——)
mode of ‘/usr/local/csf/bin/csfuir.pl’ changed from 0600 (rw——-) to 0700 (rwx——)
mode of ‘/usr/local/csf/bin/pt_deleted_action.pl’ changed from 0600 (rw——-) to 0700 (rwx——)
mode of ‘/usr/local/csf/bin/remove_apf_bfd.sh’ changed from 0600 (rw——-) to 0700 (rwx——)
mode of ‘/usr/local/csf/bin/uninstall.sh’ changed from 0600 (rw——-) to 0700 (rwx——)
mode of ‘/usr/local/csf/bin/regex.custom.pm’ changed from 0600 (rw——-) to 0700 (rwx——)
mode of ‘/usr/local/csf/bin/regex.pm’ changed from 0600 (rw——-) to 0700 (rwx——)
mode of ‘/etc/csf/csf.pl’ retained as 0700 (rwx——)
mode of ‘/etc/csf/csftest.pl’ retained as 0700 (rwx——)
mode of ‘/etc/csf/csfui.pl’ retained as 0700 (rwx——)
mode of ‘/etc/csf/lfd.pl’ retained as 0700 (rwx——)
mode of ‘/etc/csf/pt_deleted_action.pl’ retained as 0700 (rwx——)
chmod: cannot access ‘/etc/csf/*.cgi’: No such file or directory
failed to change mode of ‘/etc/csf/*.cgi’ from 0000 (———) to 0000 (———)
mode of ‘/etc/csf/remove_apf_bfd.sh’ retained as 0700 (rwx——)
mode of ‘/etc/csf/uninstall.sh’ retained as 0700 (rwx——)
chmod: cannot access ‘/etc/csf/*.php’: No such file or directory
failed to change mode of ‘/etc/csf/*.php’ from 0000 (———) to 0000 (———)
chmod: cannot access ‘/etc/csf/*.py’: No such file or directory
failed to change mode of ‘/etc/csf/*.py’ from 0000 (———) to 0000 (———)
mode of ‘/etc/csf/webmin/csf/index.cgi’ changed from 0600 (rw——-) to 0700 (rwx——)
mode of ‘/etc/cron.d/lfd-cron’ changed from 0755 (rwxr-xr-x) to 0644 (rw-r–r–)
mode of ‘/etc/cron.d/csf-cron’ changed from 0755 (rwxr-xr-x) to 0644 (rw-r–r–)
mode of ‘auto.pl’ changed from 0755 (rwxr-xr-x) to 0700 (rwx——)
‘/etc/csf/csf.conf’ -> ‘/var/lib/csf/backup/1462899559_pre_v8_23_upgrade’
*** SSH port 2222 added to the TCP_IN port list
*** SSH port 2222 added to the TCP6_IN port list
TCP ports currently listening for incoming connections:
21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096,2222,3306
UDP ports currently listening for incoming connections:
53
Note: The port details above are for information only, csf hasn’t been auto-configured.
Don’t forget to:
1. Configure the following options in the csf configuration to suite your server: TCP_*, UDP_*
2. Restart csf and lfd
3. Set TESTING to 0 once you’re happy with the firewall, lfd will not run until you do so
*WARNING* TESTING mode is enabled – do not forget to disable it in the configuration
mkdir: cannot create directory ‘/usr/local/cpanel/whostmgr/docroot/cgi/configserver’: File exists
‘cpanel/csf.cgi’ -> ‘/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf.cgi’
mode of ‘/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf.cgi’ changed from 0644 (rw-r–r–) to 0700 (rwx——)
‘csf/plus.png’ -> ‘/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/plus.png’
‘csf/loader.gif’ -> ‘/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/loader.gif’
‘csf/delete.png’ -> ‘/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/delete.png’
‘csf/ip.png’ -> ‘/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/ip.png’
‘csf/minus.png’ -> ‘/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/minus.png’
‘csf/perm.png’ -> ‘/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/perm.png’
‘csf/LICENSE.txt’ -> ‘/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/LICENSE.txt’
‘csf/csf-loader.gif’ -> ‘/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/csf-loader.gif’
‘csf/csf_small.png’ -> ‘/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/csf_small.png’
‘cpanel/Driver’ -> ‘/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/Driver’
‘cpanel/Driver/ConfigServercsf’ -> ‘/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/Driver/ConfigServercsf’
‘cpanel/Driver/ConfigServercsf/META.pm’ -> ‘/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/Driver/ConfigServercsf/META.pm’
‘cpanel/Driver/ConfigServercsf.pm’ -> ‘/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/Driver/ConfigServercsf.pm’
‘ui/images/icon.gif’ -> ‘/usr/local/cpanel/whostmgr/docroot/themes/x/icons/csf.gif’
‘cpanel/csf.conf’ -> ‘/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/csf.conf’
‘cpanel/upgrade.sh’ -> ‘/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/upgrade.sh’
csf registered
‘lfd.service’ -> ‘/usr/lib/systemd/system/lfd.service’
‘csf.service’ -> ‘/usr/lib/systemd/system/csf.service’
Created symlink from /etc/systemd/system/multi-user.target.wants/csf.service to /usr/lib/systemd/system/csf.service.
Created symlink from /etc/systemd/system/multi-user.target.wants/lfd.service to /usr/lib/systemd/system/lfd.service.
Failed to stop firewalld.service: Unit firewalld.service not loaded.
‘/etc/csf/csfwebmin.tgz’ -> ‘/usr/local/csf/csfwebmin.tgz’
Installation Completed