ConfigServer Security & Firewall (CSF) is a Stateful Packet Inspection (SPI) firewall, Login Failure Daemon (LFD) and security suite for Linux servers.
This is a maintained fork of the original CSF after ConfigServer (Way to the Web Ltd) shut down in August 2025 and released the code under the GPLv3 license.
- Stateful Packet Inspection (SPI) firewall
- Login Failure Daemon (LFD) – brute-force protection
- Extensive control panel support (cPanel, DirectAdmin, CyberPanel, CWP, Vesta, InterWorx, Webmin...)
- IP blocklists, port flood protection, connection tracking
- Process tracking, directory watching, and security checks
- Easy web UI + powerful CLI
bash <(curl -s https://raw.githubusercontent.com/AfazTech/csf/main/install.sh)cd /usr/src
rm -rf csf* AfazTech-csf*
wget https://github.com/AfazTech/csf/archive/refs/heads/main.tar.gz -O csf.tar.gz
tar -xzf csf.tar.gz
cd AfazTech-csf-main
sh install.sh- Check version:
csf -v- Test required modules:
perl /usr/local/csf/bin/csftest.pl- Important: Disable auto-updates (recommended)
sed -i 's/AUTO_UPDATES = "1"/AUTO_UPDATES = "0"/' /etc/csf/csf.conf
csf -r- Open CSF configuration:
nano /etc/csf/csf.conf- Set
TESTING = "0"when you are ready - Adjust allowed ports (
TCP_IN,TCP_OUT, etc.)
cd /etc/csf
sh uninstall.sh| Panel | Status |
|---|---|
| cPanel / WHM | Supported |
| DirectAdmin | Supported |
| CyberPanel | Supported |
| CentOS Web Panel (CWP) | Supported |
| VestaCP | Supported |
| InterWorx | Supported |
| Webmin | Supported |
| Generic Linux | Supported |
- Original project by Way to the Web Ltd (ConfigServer)
- Released under GNU General Public License v3 (GPLv3)
- This fork is community-maintained and focused on keeping CSF usable after the original project ended.
This project is licensed under the GNU General Public License v3.0.
See the LICENSE file for details.
Maintained by: AfazTech