Way to the Web Ltd and Configserver.com will be closing down permanently!

[Biswashost]

Hello, anyone notice this yet "Way to the Web Ltd and Configserver.com will be closing down permanently on 31 August 2025." As we are using CSF as firewall & CXS as antivirus, what will be our next choice? I think we need support of imunifyAV, AV+, 360 & cPGuard as well. What are you thinking? More details here: https://configserver.com/announcement/

[overseer]

Well, that came outta nowhere. But I do believe that just as nature abhors a vaccuum, so too does open source software. Some project will step in an fill in the gap. Maybe cPanel could donate some of their $$$ in monthly fees to support new infrastructure for an open version.

It's already forked on GitHub:
https://github.com/Aetherinox/csf-firewall?tab=readme-ov-file

[Starburst]

It did come out of nowhere.

Every cPanel and CWP, to mention a few use it.

csf is NOT anti-virus, that is handled by ClamAV.
So there is no need for any other anti-virus like imunifyAV, etc.

csf also hasn't been 'forked', that is an add-on to csf.

There is FirewallD and fail2ban as options.

[Biswashost]

It did come out of nowhere.

Every cPanel and CWP, to mention a few use it.

csf is NOT anti-virus, that is handled by ClamAV.
So there is no need for any other anti-virus like imunifyAV, etc.

csf also hasn't been 'forked', that is an add-on to csf.

There is FirewallD and fail2ban as options.

but with our CWP, CSF is coming as default. So, it's time to changed it to FirewallD+Fail2ban with a GUI. Also, we were using CXS as antivirus. Because ClamAV does not have better option to cleanup infected file. From admin panel we can only scan for infected file but there have no option to cleanup or remove the files. So, need a solution of it as well.

[Starburst]

I doubt it will be changed any time soon.
CSF will still work after August 31st, just no more updates.
But there are rumors it might be released as open source on Github.

ClamAV works fine fine the CLI.

[overseer]

So, it's time to changed it to FirewallD+Fail2ban with a GUI. Also, we were using CXS as antivirus. Because ClamAV does not have better option to cleanup infected file. From admin panel we can only scan for infected file but there have no option to cleanup or remove the files. So, need a solution of it as well.

In addition to CWP, you could look at Cockpit and Webmin to add-on to your servers to have GUI interfaces for firewalls, fail2ban, and ClamAV. I have all 3 installed on my servers. (Belt, suspenders, and helium balloons hold up my pants...)

[overseer]

If CSF is released as GPLv3 before their imminent closure, Configserver's developers indicated it will be posted to their GitHub repository:
https://github.com/waytotheweb/scripts
(currently just uninstall scripts for their products!)

[overseer]

CSF has been released as GPLv3 code:
https://github.com/centminmod/configserver-scripts/tree/main/csf

Starburst has a guide for updating to v15 which removes the update functionality that points to their now defunct servers:
https://starburst.help/security/csf-lfd/csf-firewall-gplv3-release/

[Starburst]

https://github.com/centminmod/configserver-scripts/tree/main/csf is a Fork.

The Official Github, and where future releases will be published is:
https://github.com/waytotheweb/scripts

[overseer]

Dang, they snookered me. I had up the correct GitHub page earlier in the day, then did a search before posting and just saw the GPLv3 notice so I used the fork link by mistake. Yes, better/safer to use the original source of the code!

[Starburst]

I think it might be the actual owners page, but since they list the other Github, it is better to be safe.

[overseer]

You made me curious -- the owner of the fork is from Australia and develops a custom LEMP stack for Alma/Rocky Linux. The stack looks lean and optimized and includes CSF:
https://centminmod.com
Way to the Web/Configserver is from the UK, so no association there. Best to go with the original GhitHub source for sure:
https://github.com/waytotheweb
https://github.com/waytotheweb/scripts/tree/main/csf

[Starburst]

There site is interesting, look like a good ol' fashioned text menu.

They also do have support for EL9.

The main Github is https://github.com/waytotheweb/scripts
And is what is mirrored.