Install and configure csf on CentOS the following steps as root user
1: Downloading csf package.
rm -fv csf.tgz wget http://www.configserver.com/free/csf.tgz
2: Remove already installed firewall settings
Execute the following command to remove already installed firewall like APF (Advanced Policy Firewall) or BFD (Brute Force Detection) from server.
[root@server #] sh /tmp/csf/remove_apf_bfd.sh
3: Installation
[root@server #] tar -xzf csf.tgz [root@server #] cd csf [root@server #] sh install.sh
You will get an output like below pasted if that was a successful installation.
----------------------------
----------------------------
*WARNING* TESTING mode is enabled - do not forget to disable it in the configuration `/etc/csf/csfwebmin.tgz' -> `/usr/local/csf/csfwebmin.tgz' Installation Completed
Then, check whether your server have required IP tables modules by using the following command.
[root@server #] perl /usr/local/csf/bin/csftest.pl
4: Configure CSF
Once the installation process is completed we need to enable the csf to work it properly. ‘csf -e'[csf -x for disabling csf] command is using to enable csf on server.
[root@server csf]# csf -e Starting lfd:[ OK ] csf and lfd have been enabled *WARNING* TESTING mode is enabled - do not forget to disable it in the configuration
The ‘csf -e’ output sounds, the csf is configured in testing mode on your server. You need to edit the conf file for enabling it.
[root@server #] vim /etc/csf/csf.conf Then change the value of 'TESTING' from 1 to 0
Important configuration options
All cofiguration options are located under the directory “/etc/csf” . Some usefull and importent configuration files are listed below.
csf.conf : Configuration file for controlling CSF. csf.allow : Allowed IP’s and CIDR addresses list on the firewall. csf.deny : Denied IP’s and CIDR addresses list on the firewall. csf.ignore : Ignored IP’s and CIDR addresses list on the firewall. csf.*ignore : The list of various ignore files of users, IP’s.
Uninstallation
Removing csf and lfd is even more simple:
cd /etc/csf sh uninstall.sh
That’s all.
Picture this: Your WordPress site is like that one friend who's always fashionably late to everything. You know, the one…
In a world where artificial intelligence is rapidly reshaping our digital landscape, AI detectors have emerged as both guardians and…
In today's digital age, e-learning has become more than just a convenience – it's a necessity. As virtual classrooms and…
Are you ready for another cPanel price adjustment? As we have approached January 2025, cPanel has rolled out significant changes…
In this growing digital world, having a website is not enough—it’s a crucial and much-needed option. But here's the challenge…