A developer named Aetherinox has forked CSF, and is actively supporting it, along with updates for CWP.
Please see the following KB, if you would like to update to this new fork and version:
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-09/ (https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-09/)
If you can, please support him also. ;)
Thanks for the tip. That did look like the fork to watch early on. If it's active and alive, that's great.
Interesting, on a clean installation it shows 15.08 as the current up-to-date version. That's using the "Stable" channel, not the "Insiders Channel." Also, it shows:
License: Invalid
Where your csf -v example shows License: None
Yea, that's a fix in 15.09
Developer though the wording 'Invalid' didn't sound right.
Same thing, I might suggest changing it to Free & Paid.
Feedback is welcome.
You also can reach the developer directly via his discord channel. :)
But if you notice, on the left side that some users complained was empty has been fixed also. :)
Thanks, all installed.
OMG were actually a nose in front of cPanel with this one!
This version/fork also works on cPanel also, but don't tell anyone. :-X
Quote from: Starburst on December 16, 2025, 11:39:59 PM
A developer named Aetherinox has forked CSF, and is actively supporting it, along with updates for CWP.
Please see the following KB, if you would like to update to this new fork and version:
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-09/ (https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-09/)
If you can, please support him also. ;)
Everything went fine up to the last csf -v:
[root@viking csf]# csf -v
INFO ConfigServer Security & Firewall
v15.08 (CentOS Web Panel)
License: Invalid
Stable Channel | Insiders Channel
[38;5;244m LOCALINPUT all opt in !lo out * ::/0 -> ::/0 [0m
[1;38;5;15;48;5;27m INFO [0m [38;5;244m Initializing [38;5;33mcsfpost[38;5;244m script [38;5;33m/usr/local/csf/bin/csfpost.sh[38;5;244m[0m
[1;38;5;15;48;5;27m INFO [0m [38;5;244m CSF web interface disabled; skipping.[38;5;244m[0m
Quote from: Starburst on December 16, 2025, 11:39:59 PM
A developer named Aetherinox has forked CSF, and is actively supporting it, along with updates for CWP.
Please see the following KB, if you would like to update to this new fork and version:
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-09/ (https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-09/)
If you can, please support him also. ;)
I am currently running v14.24 - can i go straight to this?
Thanks
Yes, you should be able to go from the closed source (14.24) to the open source version (15+).
Starburst, have you at all dabbled with the other major CSF fork, Sentinel Firewall?
https://github.com/sentinelfirewall/sentinel
Quote from: overseer on January 06, 2026, 02:52:06 PM
Yes, you should be able to go from the closed source (14.24) to the open source version (15+).
Starburst, have you at all dabbled with the other major CSF fork, Sentinel Firewall?
https://github.com/sentinelfirewall/sentinel
1. Yes, you can follow the upgrade guide on the KB to go from 14.24 to 15.08
2. Yea, Sentinel is being maintained by some cPanel admins, and is their primary focus.
As such, they aren't too worried about other panels or OS'es.
Where I asked Aetherinox to support AL10. :)
Also gave him a CWPpro license for testing. ;)
Quote from: DragoCom on December 19, 2025, 02:55:41 AM
Quote from: Starburst on December 16, 2025, 11:39:59 PM
A developer named Aetherinox has forked CSF, and is actively supporting it, along with updates for CWP.
Please see the following KB, if you would like to update to this new fork and version:
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-09/ (https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-09/)
If you can, please support him also. ;)
Everything went fine up to the last csf -v:
[root@viking csf]# csf -v
INFO ConfigServer Security & Firewall
v15.08 (CentOS Web Panel)
License: Invalid
Stable Channel | Insiders Channel
[38;5;244m LOCALINPUT all opt in !lo out * ::/0 -> ::/0 [0m
[1;38;5;15;48;5;27m INFO [0m [38;5;244m Initializing [38;5;33mcsfpost[38;5;244m script [38;5;33m/usr/local/csf/bin/csfpost.sh[38;5;244m[0m
[1;38;5;15;48;5;27m INFO [0m [38;5;244m CSF web interface disabled; skipping.[38;5;244m[0m
Yea, CWP doesn't understand color codes. :/
This is fixed in 15.09 when it comes out.
Quote from: Purelaise on January 06, 2026, 10:57:58 AM
Quote from: Starburst on December 16, 2025, 11:39:59 PM
A developer named Aetherinox has forked CSF, and is actively supporting it, along with updates for CWP.
Please see the following KB, if you would like to update to this new fork and version:
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-09/ (https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-09/)
If you can, please support him also. ;)
I am currently running v14.24 - can i go straight to this?
Thanks
Yes, you can.
But if you have any CSF files locked with chattr, you just need to unlock them first.
Quote from: Starburst on January 06, 2026, 09:53:35 PM
Quote from: overseer on January 06, 2026, 02:52:06 PM
Yes, you should be able to go from the closed source (14.24) to the open source version (15+).
Starburst, have you at all dabbled with the other major CSF fork, Sentinel Firewall?
https://github.com/sentinelfirewall/sentinel
1. Yes, you can follow the upgrade guide on the KB to go from 14.24 to 15.08
2. Yea, Sentinel is being maintained by some cPanel admins, and is their primary focus.
As such, they aren't too worried about other panels or OS'es.
Where I asked Aetherinox to support AL10. :)
Also gave him a CWPpro license for testing. ;)
Thanks that worked! Is there any thing we need to do to enable auto updating from the new source or just keep it manual?
Thanks
Quote from: Purelaise on January 07, 2026, 12:21:40 PM
Quote from: Starburst on January 06, 2026, 09:53:35 PM
Quote from: overseer on January 06, 2026, 02:52:06 PM
Yes, you should be able to go from the closed source (14.24) to the open source version (15+).
Starburst, have you at all dabbled with the other major CSF fork, Sentinel Firewall?
https://github.com/sentinelfirewall/sentinel
1. Yes, you can follow the upgrade guide on the KB to go from 14.24 to 15.08
2. Yea, Sentinel is being maintained by some cPanel admins, and is their primary focus.
As such, they aren't too worried about other panels or OS'es.
Where I asked Aetherinox to support AL10. :)
Also gave him a CWPpro license for testing. ;)
Thanks that worked! Is there any thing we need to do to enable auto updating from the new source or just keep it manual?
Thanks
The new update re-enables auto update checks, as long as those config files where unlocked when CSF was updated.
Quote from: Starburst on January 07, 2026, 11:23:04 PM
Quote from: Purelaise on January 07, 2026, 12:21:40 PM
Quote from: Starburst on January 06, 2026, 09:53:35 PM
Quote from: overseer on January 06, 2026, 02:52:06 PM
Yes, you should be able to go from the closed source (14.24) to the open source version (15+).
Starburst, have you at all dabbled with the other major CSF fork, Sentinel Firewall?
https://github.com/sentinelfirewall/sentinel
1. Yes, you can follow the upgrade guide on the KB to go from 14.24 to 15.08
2. Yea, Sentinel is being maintained by some cPanel admins, and is their primary focus.
As such, they aren't too worried about other panels or OS'es.
Where I asked Aetherinox to support AL10. :)
Also gave him a CWPpro license for testing. ;)
Thanks that worked! Is there any thing we need to do to enable auto updating from the new source or just keep it manual?
Thanks
The new update re-enables auto update checks, as long as those config files where unlocked when CSF was updated.
Brilliant!