Continued CWP support with new CSF fork

Started by Starburst, December 16, 2025, 11:39:59 PM

Previous topic - Next topic

Starburst

A developer named Aetherinox has forked CSF, and is actively supporting it, along with updates for CWP.

Please see the following KB, if you would like to update to this new fork and version:

https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-09/

If you can, please support him also. ;)

overseer

Thanks for the tip. That did look like the fork to watch early on. If it's active and alive, that's great.

overseer

Interesting, on a clean installation it shows 15.08 as the current up-to-date version. That's using the "Stable" channel, not the "Insiders Channel." Also, it shows:
License: Invalid
Where your csf -v example shows License: None

Starburst

Yea, that's a fix in 15.09

Developer though the wording 'Invalid' didn't sound right.

Same thing, I might suggest changing it to Free & Paid.

Feedback is welcome.
You also can reach the developer directly via his discord channel. :)

But if you notice, on the left side that some users complained was empty has been fixed also. :)

6Sense

Thanks, all installed.

OMG were actually a nose in front of cPanel with this one!
6Sense - Web Design, Development & Web Hosting

Starburst

This version/fork also works on cPanel also, but don't tell anyone.  :-X

DragoCom

#6
Quote from: Starburst on December 16, 2025, 11:39:59 PM
A developer named Aetherinox has forked CSF, and is actively supporting it, along with updates for CWP.

Please see the following KB, if you would like to update to this new fork and version:

https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-09/

If you can, please support him also. ;)

Everything went fine up to the last csf -v:

[root@viking csf]# csf -v
                                                                       
    INFO               ConfigServer Security & Firewall     
                       v15.08 (CentOS Web Panel)
                       License: Invalid
                       Stable Channel | Insiders Channel


  LOCALINPUT  all opt    in !lo out *  ::/0  -> ::/0  
    INFO               Initializing csfpost script /usr/local/csf/bin/csfpost.sh
    INFO               CSF web interface disabled; skipping.

Purelaise

Quote from: Starburst on December 16, 2025, 11:39:59 PM
A developer named Aetherinox has forked CSF, and is actively supporting it, along with updates for CWP.

Please see the following KB, if you would like to update to this new fork and version:

https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-09/

If you can, please support him also. ;)

I am currently running v14.24 - can i go straight to this?

Thanks

overseer

Yes, you should be able to go from the closed source (14.24) to the open source version (15+).

Starburst, have you at all dabbled with the other major CSF fork, Sentinel Firewall?
https://github.com/sentinelfirewall/sentinel

Starburst

Quote from: overseer on January 06, 2026, 02:52:06 PM
Yes, you should be able to go from the closed source (14.24) to the open source version (15+).

Starburst, have you at all dabbled with the other major CSF fork, Sentinel Firewall?
https://github.com/sentinelfirewall/sentinel

1. Yes, you can follow the upgrade guide on the KB to go from 14.24 to 15.08

2. Yea, Sentinel is being maintained by some cPanel admins, and is their primary focus.
As such, they aren't too worried about other panels or OS'es.
Where I asked Aetherinox to support AL10. :)
Also gave him a CWPpro license for testing. ;)

Starburst

Quote from: DragoCom on December 19, 2025, 02:55:41 AM
Quote from: Starburst on December 16, 2025, 11:39:59 PM
A developer named Aetherinox has forked CSF, and is actively supporting it, along with updates for CWP.

Please see the following KB, if you would like to update to this new fork and version:

https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-09/

If you can, please support him also. ;)

Everything went fine up to the last csf -v:

[root@viking csf]# csf -v
                                                                       
    INFO               ConfigServer Security & Firewall     
                       v15.08 (CentOS Web Panel)
                       License: Invalid
                       Stable Channel | Insiders Channel


  LOCALINPUT  all opt    in !lo out *  ::/0  -> ::/0  
    INFO               Initializing csfpost script /usr/local/csf/bin/csfpost.sh
    INFO               CSF web interface disabled; skipping.

Yea, CWP doesn't understand color codes. :/
This is fixed in 15.09 when it comes out.

Starburst

#11
Quote from: Purelaise on January 06, 2026, 10:57:58 AM
Quote from: Starburst on December 16, 2025, 11:39:59 PM
A developer named Aetherinox has forked CSF, and is actively supporting it, along with updates for CWP.

Please see the following KB, if you would like to update to this new fork and version:

https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-09/

If you can, please support him also. ;)

I am currently running v14.24 - can i go straight to this?

Thanks

Yes, you can.
But if you have any CSF files locked with chattr, you just need to unlock them first.

Purelaise

Quote from: Starburst on January 06, 2026, 09:53:35 PM
Quote from: overseer on January 06, 2026, 02:52:06 PM
Yes, you should be able to go from the closed source (14.24) to the open source version (15+).

Starburst, have you at all dabbled with the other major CSF fork, Sentinel Firewall?
https://github.com/sentinelfirewall/sentinel

1. Yes, you can follow the upgrade guide on the KB to go from 14.24 to 15.08

2. Yea, Sentinel is being maintained by some cPanel admins, and is their primary focus.
As such, they aren't too worried about other panels or OS'es.
Where I asked Aetherinox to support AL10. :)
Also gave him a CWPpro license for testing. ;)

Thanks that worked! Is there any thing we need to do to enable auto updating from the new source or just keep it manual?

Thanks

Starburst

Quote from: Purelaise on January 07, 2026, 12:21:40 PM
Quote from: Starburst on January 06, 2026, 09:53:35 PM
Quote from: overseer on January 06, 2026, 02:52:06 PM
Yes, you should be able to go from the closed source (14.24) to the open source version (15+).

Starburst, have you at all dabbled with the other major CSF fork, Sentinel Firewall?
https://github.com/sentinelfirewall/sentinel

1. Yes, you can follow the upgrade guide on the KB to go from 14.24 to 15.08

2. Yea, Sentinel is being maintained by some cPanel admins, and is their primary focus.
As such, they aren't too worried about other panels or OS'es.
Where I asked Aetherinox to support AL10. :)
Also gave him a CWPpro license for testing. ;)

Thanks that worked! Is there any thing we need to do to enable auto updating from the new source or just keep it manual?

Thanks

The new update re-enables auto update checks, as long as those config files where unlocked when CSF was updated.

Purelaise

Quote from: Starburst on January 07, 2026, 11:23:04 PM
Quote from: Purelaise on January 07, 2026, 12:21:40 PM
Quote from: Starburst on January 06, 2026, 09:53:35 PM
Quote from: overseer on January 06, 2026, 02:52:06 PM
Yes, you should be able to go from the closed source (14.24) to the open source version (15+).

Starburst, have you at all dabbled with the other major CSF fork, Sentinel Firewall?
https://github.com/sentinelfirewall/sentinel

1. Yes, you can follow the upgrade guide on the KB to go from 14.24 to 15.08

2. Yea, Sentinel is being maintained by some cPanel admins, and is their primary focus.
As such, they aren't too worried about other panels or OS'es.
Where I asked Aetherinox to support AL10. :)
Also gave him a CWPpro license for testing. ;)

Thanks that worked! Is there any thing we need to do to enable auto updating from the new source or just keep it manual?

Thanks

The new update re-enables auto update checks, as long as those config files where unlocked when CSF was updated.

Brilliant!