Integrations

/
/
Configuring CSF on a server with ispmanager 6

Configuring CSF on a server with ispmanager 6

Please note!

On August 31, 2025, the ConfigServer Firewall project was officially closed, however all files are available on GitHub.

Important!

Installing CSF will reconfigure your firewall rules. We highly recommend to install it immediately after installing ispmanager 6.

To install CSF, download the archive and run the installer:

wget https://download.configserver.com/csf.tgz
tar -xzf csf.tgz
cd csf
sh install.sh

After installation is complete, test the CSF PERL modules:

perl /usr/local/csf/bin/csftest.pl

If all modules work correctly, the script will return the following output:

Testing ip_tables/iptable_filter...OK
Testing ipt_LOG...OK
Testing ipt_multiport/xt_multiport...OK
Testing ipt_REJECT...OK
Testing ipt_state/xt_state...OK
Testing ipt_limit/xt_limit...OK
Testing ipt_recent...OK
Testing xt_connlimit...OK
Testing ipt_owner/xt_owner...OK
Testing iptable_nat/ipt_REDIRECT...OK
Testing iptable_nat/ipt_DNAT...OK

RESULT: csf should function on this server

Now you need to configure CSF for proper operation. The first changes should be made to the /etc/csf/csf.conf file. Set the following values ​​for the parameters:

  • TCP_IN = "20,21,22,25,53,80,110,143,443,465,587,853,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096,8443,1500,35000:35999"
  • TCP_OUT = "20,21,22,25,37,43,53,80,110,113,443,587,853,873,993,995,2086,2087,2089,2703,1501"
  • TESTING = "0"
  • UI = "1"
  • UI_USER = "root"
  • UI_PASS = "passwd"
  • DOCKER = "1" (if you plan to use Docker, including alternative DBMSs)

Next, add to the /etc/csf/ui/ui.allow file the IP addresses from which access to the CSF web interface will be allowed.

After making the changes, run CSF with the follwoing command:

csf -e