CSF Firewall closing down August 31, 2025!

Surprise and unfortunate news is CSF Firewall folks are closing down end of this month on August 31, 2025 https://configserver.com/announcement/. Their site site is down right now so can't read of the rest of the details. For questions and comments, please post in dedicated discussion thread at https://community.centminmod.com/th...-down-august-31-2025-discussion-thread.28986/.

FYI, Centmin Mod uses CSF Firewall for it's firewall management which is a wrapper to iptables/firewalld https://centminmod.com/csf_firewall.html. Just read the news, so definitely need to formulate how Centmin Mod LEMP stack will handle this.

---

So CSF Firewall existing installs continue to work, just no more updates or fresh installs after August 31, 2025!

Other discussions around this:

• WHT https://www.webhostingtalk.com/showthread.php?t=1945110. Chirpy CSF owner/maintainer did mention considering publishing CSF and LFD under a GPLv3 license so it can be forked https://www.webhostingtalk.com/showthread.php?t=1945110&p=10488780#post10488780.
• Lowendtalk https://lowendtalk.com/discussion/2...mail-scanner-exploit-scanner-etc-closing-down
• DirectAdmin ConfigServer shutting down as of 31st of August 202
• cPanel https://support.cpanel.net/hc/en-us...135831-ConfigServer-closing-down-and-now-what

WayBack Machine copy

• Announcement – ConfigServer Services

 

August 25, 2025 AEST Update

There are ~7 days until CSF Firewall's developer and site configserver.com shut down forever. While they have mentioned they are looking at open sourcing CSF Firewall under GPLv3 licensing before shutdown, for Centmin Mod and its users, it's cutting it pretty close. I was hoping they would have done this much sooner.

So, for this CSF Firewall shutdown change, I am updating Centmin Mod's latest stable and beta version branches to prepare for this change to minimise impact on Centmin Mod users. Centmin Mod will have its own hosted mirror for CSF Firewall download, which doesn't just mirror a copy of csf.tgz download file but also updates and changes the hardcoded download.configserver.com CSF Firewall download URL so that it doesn't call home or check the soon to be shutdown download.configserver.com site.

For Existing Centmin Mod Users

For existing Centmin Mod users on the following version branches, you can run SSH command cmupdate to get the updates for this:

Centmin Mod versions (updated with CSF Firewall download mirror switch since August 25, 2025 AEST)

• 131.00stable
• 132.00stable
• 140.00beta01

Centmin Mod versions (updated with CSF Firewall download mirror switch since August 28, 2025 AEST). Decided to update older versions too:

• 123.09beta01
• 124.00stable

For existing Centmin Mod users who are on older Centmin Mod versions, you will need to update to one of the 3 above mentioned versions - ideally 140.00beta01, to get the update. You can update following one the posts guides in this thread https://community.centminmod.com/th...ase-with-almalinux-rocky-linux-support.25572/

For New Centmin Mod Installations

New Centmin Mod installations will install CSF Firewall via the self-hosted Centmin Mod download mirror copy starting from today.

If you have issues, questions or feedback, report them in the installs and upgrades forums at https://community.centminmod.com/forums/install-upgrades-or-pre-install-questions.8/.

 

August 29, 2025 AEST Update

Free scripts were released under GPLv3 open source licensing https://github.com/waytotheweb/scripts. I compared the CSF Firewall GPLv3 open source code (v15.00) to the last configserver.com released code (v14.24) and wrote a summary at https://github.com/centminmod/configserver-scripts/blob/main/README-gpl-csf.md.

For Centmin Mod users CSF Firewall mirror, I bumped version to v14.25. Function wise as CSF Firewall, no difference in v14.24 vs v14.25 vs v15.00 GPLv3 release other than where and if it checks for updates.

• v14.24 checks download.configserver.com
• v14.25 Centmin Mod mirror checks download.centminmod.com which means when I update Centmin Mod mirror CSF Firewall version to v15.00 GPLv3, Centmin Mod CSF Firewall users automatically will get that update via CSF Firewall's native auto update routines or via manual command = csf -u. Centmin Mod mirror version allows me to later on update and direct CSF Firewall downloads to any other developers who want to take over CSF Firewall development as well edit: just updated Centmin Mod CSF Firewall edition to v15.01 which retains the auto update check routines.
• v15.00 has all checks disabled

Centmin Mod CSF Firewall mirror check only for v14.25 to v15.01 update

Code (Text):

csf -c
A newer version of csf is available - Current:v14.25 New:v15.01

Code (Text):

# update
csf -u

# version check
csf -v
csf: v15.01 (generic)

Code (Text):

head -30 changelog.txt
ChangeLog:

15.01 - Changed license to GPLv3. Updated Centminmod.com Edition that retains the
        auto update routine to update via Centmin Mod mirror.  

        29th August 2025

15.00 - Changed license to GPLv3.

        29th August 2025

14.25 - Centminmod.com Edition. Prepared for ConfigServer shutdown (August 31, 2025)
        https://community.centminmod.com/threads/28985/

        Migrated from configserver.com to centminmod.com mirrors

        Updated all download server references

        2nd August 2025

 

CSF version check

Centmin Mod versions below have been updated with an initial CSF Firewall version check notice when you first SSH login to your servers that will inform users of CSF Firewall changes and also report your CSF Firewall version. Run cmupdate command, to pull in this update feature.

• 140.00beta01
• 132.00stable
• 131.00stable
• 130.00beta01
• 124.00stable
• 123.09beta01

Examples

Example when CSF Firewall is v14.24 which is last original version that has download URL shutting down on August 31, 2025. If existing tools/csfcf.sh cronjob is detected, the notice will instruct you to let cronjob auto update and switch your CSF Firewall to Centmin Mod mirror. If you manually removed the /usr/local/src/centminmod/tools/csfcf.sh cronjob, the notice will inform you to manually run the /usr/local/src/centminmod/tools/csfcf.sh cronjob with auto argument flag to switch to Centmin Mod mirrored CSF Firewall version.

Existing /usr/local/src/centminmod/tools/csfcf.sh cronjob.

Code (Text):

crontab -l | grep 'csfcf.sh'
22 */12 * * * /usr/local/src/centminmod/tools/csfcf.sh auto >/dev/null 2>&1

Code (Text):

===============================================================================
* Nginx Update May Be Available via centmin.sh menu option 4
* see https://centminmod.com/nginx.html#nginxupgrade
===============================================================================
* Current Nginx Version:           1.27.5
* Latest Nginx Mainline Available: 1.29.0 (centminmod.com/nginxnews)
===============================================================================

===============================================================================
 Centmin Mod code updates available for /usr/local/src/centminmod
 to update, run cmupdate command in SSH & re-run centmin.sh once & exit
===============================================================================
 Current local server Centmin Mod branch installed: 140.00beta01
===============================================================================

===============================================================================
* Centmin Mod now hosts its own CSF Firewall mirror for continued support
* Details at https://community.centminmod.com/threads/28985/
===============================================================================
* Current CSF Version: 14.24
* Mirror CSF Version:  15.01
* Update available: Run cmupdate && let cronjob tools/csfcf.sh auto update CSF
===============================================================================

Example when CSF Firewall is already v15.01 which is latest Centmin Mod mirror download URL version.

Code (Text):

===============================================================================
 Centmin Mod local code is up to date at /usr/local/src/centminmod
 no available updates at this time...
===============================================================================
 Current local server Centmin Mod branch installed: 141.00beta01
===============================================================================

===============================================================================
* Centmin Mod now hosts its own CSF Firewall mirror for continued support
* Details at https://community.centminmod.com/threads/28985/
===============================================================================
* Current CSF Version: 15.01
* Mirror CSF Version:  15.01
* Your CSF version matches the mirror version
===============================================================================

Or updating from Centmin Mod CSF 15.01 to 15.02

Code (Text):

===============================================================================
* Centmin Mod now hosts its own CSF Firewall mirror for continued support
* Details at https://community.centminmod.com/threads/28985/
===============================================================================
* Current CSF Version: 15.01
* Mirror CSF Version: 15.02
* Update available: Run csf -u to update CSF Firewall
===============================================================================

 

csfa nftables wrapper

I thought I'd also share one solution I am working on for AlmaLinux/Rocky Linux 10 (EL10), which supports nftables instead of iptables - create a csfa wrapper for nftables https://community.centminmod.com/th...tive-csfa-nftables-wrapper-script-demo.29283/. CSF Firewall doesn't support nftables so won't work with EL10 operating systems.