Replacing APF for CSF

I had this on my last server that had cpanel and that is one nice firewall...I may look at it as soon as I can find the time...
 
If you read the license you will see that it is not GPL and that the terms are very restrictive, can't be modified, nor adapted,…
 
This seems to support generic Linux systems now. I installed it on my test box and it runs great. I might replace APF/BFD with this.
 
It's a frontend for iptables, not ipchains :) That's why it's not running on FreeBSD. It's a linux tool, not unix.
 
If you read the license you will see that it is not GPL and that the terms are very restrictive, can't be modified, nor adapted,…
It's a fairly crazy license. The biggest restriction I see is that you can only put it on your own server. For example if you rent out servers, the license doesn't authorize you to put it on those servers.

I'm not sure whether the license allows you to install it for others; it appears that it probably does if you're working for the person on whos server you're installing it.

Jeff
 
It's a fairly crazy license. The biggest restriction I see is that you can only put it on your own server. For example if you rent out servers, the license doesn't authorize you to put it on those servers.

I'm not sure whether the license allows you to install it for others; it appears that it probably does if you're working for the person on whos server you're installing it.

Jeff

I really don't think that they will come after you man.
 
Personally, I don't want to risk my business on your assurance that you don't think they'll come after me.

Your mileage may of course may differ.

:)

Jeff
 
I think they have changed the terms of the license now - not 100% but think I read about it on WHT.

Installed it on a test VPS and although its not as easy to do as the cPanel install (all click theboxes / gui thing), the config file you have to edit is nicely commented.

Ry
 
I know this is an old post, but if any one is interested. I recently had an incident occur that called for a complete recovery from a damaged LVM. Thankfully, smtalk was there to do the dirty work. I can't thank him enough... He is very skilled and quick at what he does. I would recommend him to anyone needing assistance.
Somewhere along the way in the past I had replaced apf/bfd for csf as the title mentions and documented my work...
DirectAdmin CSF Install

Let me know if you spot any mistakes and thanks again smtalk,
Ted
 
Do we know for certain that the licensing for CSF is compatible with commercial use at a hosting company? If so, then perhaps you'll consider posting your How-To in our forums, in the How-Tos section?

Jeff
 
Jeff,

I did some research and it looks as though this license does accommodate commercial use... unless I have misinterpreted. Have a look here at the main page, or here for the direct link to the license. I will post the instructions in the how to as soon as I get feedback from the group.

update:
taken from here:

License Scope Clarification
Just a question to clarify the scope of the license before I look into using CSF...

On your website, you state "It is released free of charge, with no warranty to its suitability."

From the License:
Quote:
3.1 This Licence permits you to:

3.1.1 use the Product on a single computer under your personal
control and only in respect of a single internet domain and a
single install on that domain;
My understanding is this is a firewall management script written for cPanel (and others) which will by definition have multiple domains, and many cPanel hosters have multiple servers.

Does this license really allow free use on a cPanel server with multiple domains running on it? If so, does that include cPanel servers with resellers hosted? Can I use this on more than one cPanel server?

If not, what are the options to use this script if one desires?

Hi,

Thank you for pointing that out. We do actually have a newer license than that listed and I've corrected it on both the site and in the distributions. You may need to refresh your browser cache if you still see the older license.

You're free to install the application on any number of servers as you wish regardless of the number of domains you host.

Thanks,
Ted
 
Last edited:
No, it is impossible., CSF uses iptables, and it is not implemented in freebsd.
---
We are using CSF+LFD on most of our servers for more then one year. Everything works fine. New csf v3 has a lot of new useful functions, like management of temprorary blocks.
 
No, it is impossible., CSF uses iptables, and it is not implemented in freebsd.
---
We are using CSF+LFD on most of our servers for more then one year. Everything works fine. New csf v3 has a lot of new useful functions, like management of temprorary blocks.
Whats LFD? I have stopped using Linux three years ago.
So FreeBSD users will be left without CSF and the only DDoS tool for FreeBSD is Mod_Security 2.x?
 
FreeBSD does not implement iptables in its kernel. It has its own firewalling tools. Your best bet would be to ask on a FreeBSD forum to find out what firewall tools you can use with FreeBSD.

Jeff
 
Back
Top