Should we update CSF to V15??

[kandalf]

CSF updates stopped in August. What's the recommended approach: update to V15 or use the workaround from https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/csf-firewall-error-oops-unable-to-download-no-host-option-provided/ to keep v14.24?

I need some opinions, I have multiple servers and I want to go to a secure approach

[Starburst]

It's NOT a 'workaround', it's an upgrade path.

The original CSF made by Way to the Web Ltd. is dead.
Hence why you haven't been getting updates.

Not sure where you have been, but that was announced and posted all over the place last year.

[overseer]

Probably your best choice would be to update to Aetherinox's CSF fork, which is now at 15.08. It seems to be actively maintained and supports CWP directly:
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-08/

Alternately, the other promising fork for CSF is the Sentinel firewall supported by cPanel and available on GitHub:
https://github.com/sentinelfirewall/sentinel

[kandalf]

It's NOT a 'workaround', it's an upgrade path.

The original CSF made by Way to the Web Ltd. is dead.
Hence why you haven't been getting updates.

Not sure where you have been, but that was announced and posted all over the place last year.

I'm more of a coder than a sysadmin. I don't remember seeing those announcements, but no problem. I'm finding the best solution now.

Like overseer mentioned, this seems to be the right approach:
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-08/

But that's for v15 → v15.08. To go from v14 to v15, is this the correct tutorial?
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/csf-firewall-gplv3-release-tweaked-for-cwp/

CWP team should have made this upgrade automatic.

[Starburst]

CWP doesn't control CSF, never has, never will.

Which is good & bad about CWP, they allow you to choose and customize most of the features (Apache, PHP, ModSecurity, Nginx, MariaDB, etc.)

But we are trying to get them to incorporate this fork into CWP, instead of the dead one.

Then there are also CSF forks, that people have made paid, against the GPL. That some people may choose as well.

[kalybg]

Hello,
I updated CSF Firewall – to v15.08 using these instructions - https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-08/

I want to ask if it is possible to update to version 15.11 using this source - https://sentinelfirewall.org/docs/upgrade-from-csf/

Greetings,

[Starburst]

They are 2 sperate CSF forks.

Hence all the forks have different version numbers now, not a universal one.

Some could use the last CSF v15.00 code, call it CSF2 with v1.0

If you want to switch to the Sentinel  fork, you can.
But from what I read it's aimed more at cPanel.
It also doesn't have the support like the Aetherinox fork does.

But it's all personal preference at this time.

[kalybg]

OK .... Thank you

[venty]

Hi,

Thank you very much for the answers here, but I've gotten distracted...

I'm now with AL 9.7, but with the original CSF of the CWP, and with version 14.2, I'm just asking for the links for:

1. Do I have to be on version 15 of the original CSF of the CWP to be able to switch to the CSF fork of Aetherinox??
A link to switch from version 14.2 to version 15.0 of the original CSF of the CWP...

2. And the link to switch from the original CSF to the CSF fork of Aetherinox...

Thanks in advance!

BR
Venty

[overseer]

Just follow Starburst's guide to update to CSF 15.08 (Aetherinox's fork):
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-08/

[venty]

Just follow Starburst's guide to update to CSF 15.08 (Aetherinox's fork):
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-08/

Hi,

Thanks for the answer, but I'm now with the original CSF of the CWP, version 14.2. Shouldn't I follow one of these two instructions before following the instruction you provided:

https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/csf-firewall-gplv3-release-tweaked-for-cwp/

or

https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/csf-firewall-error-oops-unable-to-download-no-host-option-provided/

or both?

and then the instructions you provided:

https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-08/

and I already saw that the following are also available:

https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-09/

Please tell me which one to follow and which one to follow after that...

Thanks in advance!


BR
Venty

[overseer]

You should follow the 15.08 guide if you are still on the CWP default (dead end) track. Then you can just issue

Code Select Expand

csf -u
to update if it doesn't auto-update to 15.09.