Csf firewall ui

Discussion in 'Tips/Tricks/Mods' started by Thaddeus, Jan 24, 2016.

  1. Thaddeus

    Thaddeus New Member

    I've always been a fan of csf firewall. Having migrated to Ispconfig recently I was looking for a way to have access to its ui without installing webmin.
    In the latest version of csf firewall I found the ui/module for Ispconfig was already there.

    After following the standard csf install process
    cd /usr/src
    rm -fv csf.tgz
    wget https://download.configserver.com/csf.tgz
    tar -xzf csf.tgz
    cd csf
    sh install.sh
    You will see a directory
    /usr/src/csf/ispconfig and the file /usr/src/csf/ispconfig/csf.txt

    Edit csf.txt change the line
    /bin/cp -avf /etc/csf/ispconfig/* /usr/local/ispconfig/interface/web/csf/
    /bin/cp -avf /usr/src/csf/ispconfig/* /usr/local/ispconfig/interface/web/csf/
    so that it looks like
    mkdir /usr/local/ispconfig/interface/web/csf/
    mkdir /usr/local/ispconfig/interface/web/csf/form
    mkdir /usr/local/ispconfig/interface/web/csf/lib
    mkdir /usr/local/ispconfig/interface/web/csf/lib/lang
    mkdir /usr/local/ispconfig/interface/web/csf/list/
    mkdir /usr/local/ispconfig/interface/web/csf/templates
    /bin/cp -avf /usr/src/csf/ispconfig/* /usr/local/ispconfig/interface/web/csf/
    chown -R ispconfig:ispconfig /usr/local/ispconfig/interface/web/csf/
    find /usr/local/ispconfig/interface/web/csf -type f -exec chmod 644 {} \;
    find /usr/local/ispconfig/interface/web/csf -type d -exec chmod 755 {} \;
    gcc -o /usr/local/ispconfig/interface/web/csf/ispconfig_csf /usr/local/ispconfig/interface/web/csf/ispconfig_csf.c
    chown root:root /usr/local/ispconfig/interface/web/csf/ispconfig_csf
    chmod -v 4755 /usr/local/ispconfig/interface/web/csf/ispconfig_csf

    then run
    bash /etc/csf/ispconfig/csf.txt
    see that there are no errors

    The login to the control panel
    Go to System > Cp users > admin
    Enable the csf module and save.

    Logout and login and there you will see the Csf menu tab with the name Security
    Ilko, ganewbie, DDArt and 1 other person like this.
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    That's nice to hear. I was not aware that they developed an addon for ISPConfig.
  3. concept21

    concept21 Active Member

    Only a Joke.
    Nothing under /usr/src/ :p
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    There is a directory ispconfig in the csf tar.gz.
  5. concept21

    concept21 Active Member

    My procedure is simpler.
    Just copy the whole directory /usr/local/src/csf/ispconfig/ to /etc/csf/

    Then, run /etc/csf/ispconfig/csf.txt

    Next time when csf does a update, I guess it will also update the ispconfig addon. :D
  6. concept21

    concept21 Active Member

    The GUI is exactly the same as that in webmin.
    You can drop the old dead Bastile support altogether. :p
  7. linuxuser1978

    linuxuser1978 New Member

    It´s work. ;)

    Ilko, ganewbie and webguyz like this.
  8. Ilko

    Ilko New Member


    so bad I missed this. I was just going to install it on my 2 servers as well (I have always loved csf), but they have removed it. Currently there is no more ispconfig folder when you download it. Also csf have stated, that they have removed it since 8.15:

    Removed development code for ispconfig from distribution as this
    should NOT be used. It has never been implemented nor released as a
    supported solution and is likely to be insecure. Upgrading will remove
    any installations of this development code "

    For reference:

    Could you share it, if you still have your archives ? - (it is just user interface for ISPconfig3, unless it is buggy I don't believe it is unsecured) ...
    Denver Prophit Jr. likes this.
  9. Denver Prophit Jr.

    Denver Prophit Jr. New Member

    Well that's sad. I like CSF Firewall. And, I like CXS IDS!
  10. Thaddeus

    Thaddeus New Member

    You can use the inbuilt csf UI and set it up on a port of your choosing.

Share This Page