Enable ConfigServer Security & Firewall (csf) on CustomBuild > Edit Options > Advanced Settings?

[pinotje]

Hi all,

I have been using the (third party) plugin ConfigServer Security & Firewall (WTTW) for a while without any problems.

But recently I found out that there is an option on 'CustomBuild > Edit Options > Advanced Settings' called 'csf' to enable or disable:

What is this option?
I really thought that while I'm using CSF it's already enabled anyway?
Or am I missing something?

Best regards,
Pinotje

 

[Richard G]

I really thought that while I'm using CSF it's already enabled anyway?

Ha mede Mestreechteneer!

No you're not missing someting. We also used CSF for many years. But since a couple of years CSF is automatically being installed with Directadmin if you install a new server.
Then there are some options, some combination with the DA bruteforce if I'm not mistaken, which are integrated automatically.
This is when you set CSF to yes in the custombuild plugin.

Ofcourse when you install it manually, it's not done via the DA and custombuild might not "see" that it's installed and working.
However it is enabled and working. Easy to check via SSH also.

Gruutsjes,
Richard.

 

[BillyS]

I just checked and my configuration shows this as "yes" the default value is '"no"

 

[pinotje]

Ha mede Mestreechteneer!

No you're not missing someting. We also used CSF for many years. But since a couple of years CSF is automatically being installed with Directadmin if you install a new server.
Then there are some options, some combination with the DA bruteforce if I'm not mistaken, which are integrated automatically.
This is when you set CSF to yes in the custombuild plugin.

Ofcourse when you install it manually, it's not done via the DA and custombuild might not "see" that it's installed and working.
However it is enabled and working. Easy to check via SSH also.

Gruutsjes,
Richard.

Hoi Richard,

Thanks for your reply!

Should I uninstall ConfigServer Firewall from Plugin Manager:

And then enable CSF from 'CustomBuild > Edit Options > Advanced Settings' ?

What is the best practice/option?

Best regards,
Pinotje

 

[Richard G]

Should I uninstall ConfigServer Firewall from Plugin Manager:

Not really needed. I don't use the build in CSF either, have my own scripts which I use for the DA BFM.

However, if you want to have DA do everything, you could do it like you say. It's a choice. IMHO there is no best option. Maybe via DA is a bit easier since you don't have to use own scripts.

If you want to change this, just backup your configs first. So csf.conf, csf.pignore, csf.allow and csf.ignore and also the regex if you changed something. Just to be sure.

 

[pinotje]

Thanks!

 

[Sebastian]

Updating this for reference, to remove CSF via CustomBuild using CLI at-scale, this is the way we've identified that works nicely:

da build set csf no
da build remove_csf
systemctl daemon-reload
systemctl reset-failed csf.service lfd.service

We did this due to moving the workload over to Imunify360, largely due to CSF being mostly unmaintained now since WTTW closed down.