Feedback on CFS Firewall

Works nicely for me. I used APF before and though CSF can be hassle sometimes, the many extra features makes it worth it.
 
I'd love to try it, but since their license (definitely overkill in my opinion, though it's nice to know they indemnify me if one of their employees kills me :D) doesn't permit me to install it for others as part of a commercial service, it wouldn't be a valuable use of my time.

Though the firewall is free as in beer, it's certainly not free as in speech, and anyone considering it should definitely read their license.

Jeff
 
We used to use it on our production servers until a stable release caused the generic version to stop functioning and generate error reports every second. Our admin email was flooded with thousands of emails before I gave up trying to fix it and just uninstalled the software and replaced it with APF.

CSF does have a lot of great features, but they aren't worth the hassle to our company.
 
Hey Jeff !

They made a plugin for DA (v1.0) !! I've been using it on a few servers,. with both egress and ingress filtering,. and it works !!

:D
 
cyberneticos said:
They made a plugin for DA (v1.0) !! I've been using it on a few servers,. with both egress and ingress filtering,. and it works !!
Click to expand...
Link please. But I'd have to work with them on how we can install or even support it under the terms of their license. Please post the link so I can look at it.

Thanks.

Jeff
 
I've received a response to my request for license clarification.

Jonathan of the Way to the Web Limited sales department writes:
You can indeed install, monitor and manage csf for your clients for
which you're free to charge if you so wish. The license does not
restrict this.

What the license prevents is others distributing our software from their
own website, offering our software for sale or passing off our software
as their own.
Click to expand...

Jeff
 
Hmmm,.. well,... perhaps he needs to rethink the licence terms. Certainly makes me understand that we can't translate the software.

But,. hey if I have any legal problems, can you send me that email ???

heheheh

:D:D
 
I'm not sure why you'd have to translate the softwrae to install it :).

Unfortunately the copy of the email sent to me wouldn't protect you; if you need your own copy then you should probably write for clarification yourself.

He also wrote to me that what he called those odd clauses in the contract regarding personal injury, etc, are required by English law.

If that's true, then I guess everyone releasing software under the GPL are breaking English law. You've been warned :).

Jeff
 
:confused: I'm talking about translating the plugin interface, not the installation process.

:p I was just kidding about the email. I wouldn't rely on an overseas forum users private email as evidence in a court. hehehe man, you took that one too deep.

Man, I hope none of my ded customers get hurt installing this plugin !!! hmmmm,... ded customers,.. getting hurt...

DOH !

I think that's a sign !!!!!
 
ded customers...

When I was still a boy my father had a friend in the mortuary business. Once I asked him, "Manny, how's business?"

He answered, "It's great Jeff, people are dying to see me."

I liked that so much that a month or so later when a friend of mine was visiting me at the same time Manny was visiting my father I went up to him with my friend and asked him again, "Hey, Manny, how's business?"

He surprised me with a different answer:

"It's dead, Jeff".

:)

My friend liked that one, too :D.

Jeff
 
Any new thoughts on cfs?

Myself, have been running it for quite a while now, no problems. The DA plugin is sweet. Wish I could upgrade it from my DA panel, but I can live without that feature.

Anyone using block by country code feature? I've cut down on SSH attacks BIG TIME. Like, went from 70-100/day, down to like 5/day. My mailbox happy now. :D
 
KISS is the best.
it's easy to use, use little resource, and more effective on high load.

just need to improve it a little bit for easiest ban ip (ex. kiss -b x.x.x.x).
 
BestBoard said:
KISS is the best.
it's easy to use, use little resource, and more effective on high load.

just need to improve it a little bit for easiest ban ip (ex. kiss -b x.x.x.x).
Click to expand...
Great idea, but it would require quite a bit of rewriting. Care to do it ;)?

Jeff
 
You must log in or register to reply here.
Back
Top