How to install ConfigServer Firewall to cPanel/WHM?

The ConfigServer Firewall - CSF is one of the most popular and advanced firewall suite available for Linux machines. Though it has more advanced configuration options, it's too easy to install and flexible to configure. This article will guide you to install CSF. Please note that, following tutorial is only applicable to VPS or Dedicated server customers.

Login to your server via SSH with root user and retrieve the CSF package files using wget command.

 wget https://download.configserver.com/csf.tgz

Unpack the downloaded archive.

 tar xfz csf.tgz

Navigate to the uncomperssed csf directory.

 cd csf

Run the installer.

 sh install.sh

It will create configuration file and add necessary cPanel services to allow list. Once firewall is installed, you will see message similar to following.

TCP ports currently listening for incoming connections:
21,22,25,53,80,110,143,443,465,993,995,2077,2078,2082,2083,2086,
2087,2095,2096,3306

UDP ports currently listening for incoming connections:
53,123

Note: The port details above are for information only, csf hasn't 
been auto-configured.

Don't forget to:
1. Configure the TCP_IN, TCP_OUT, UDP_IN and UDP_OUT options in 
the csf configuration to suite your server
2. Restart csf and lfd
3. Set TESTING to 0 once you're happy with the firewall

Adding current SSH session IP address to the csf whitelist in csf.allow:
Adding 10.30.6.17 to csf.allow only while in TESTING 
mode (not iptables ACCEPT)
*WARNING* TESTING mode is enabled 
- do not forget to disable it in the configuration

Installation Completed

Start CSF testing mode by following command.

/etc/init.d/csf restart

Once you finish the testing, bring CSF out of testing mode by editing csf.conf file. Open this file in any editor of your choice. We have used nano editor to edit this file as follows.

 nano /etc/csf/csf.conf

At top of this file, you will find following text block.

# server! Then do remember to set it to 0 and restart csf when you're sure
# everything is OK. Stopping csf will remove the line from /etc/crontab
TESTING = "1"

Edit the last line of this block and save the changes.

TESTING = "0"

Restart the CSF. That's it, your CSF firewall is up and running.

/etc/init.d/csf restart

  • 0 Users Found This Useful

Was this answer helpful?

Related Articles

How to Create Reseller Account in WHM?

WHM allows you to create reseller accounts under your cPanel Linux VPS. To create reseller...

How to install CloudFlare cPanel plugin in WHM?

CloudFlare plugin integrates CloudFlare services with cPanel server and allows your customers to...

How to Install SSL Certificate on WHM/cPanel Services?

By default, all WHM/cPanel services use self signed certificate and you get warning while using...

How to install memcache on WHM/cPanel server (CentOS)?

Following article will assist you to install Memcache in cPanel/WHM server. Login into your WHM....

How to convert addon domains to a separate cPanel account?

You may have multiple addon Domains hosted in a cPanel account. Following article will help you...