Centmin Mod CSF Firewall v16.33 beta release

Centmin Mod's CSF Firewall forked mirror version v16.33 beta release is available for Centmin Mod LEMP stack users to test on spare dev/non-production servers. It's totally opt-in and not an automatic update.

CSF v16.33 is the first version to start updating/fixing the original CSF Firewall code from v14.24/v15.00 GPLv3 release. Some of the updates are related to improvements to CSF Firewall v16.31/v16.32 https://community.centminmod.com/threads/csf-firewall-v16-31-security-update-for-centmin-mod.32533/.

If folks have spare test AlmaLinux/Rocky Linux 8, 9, 10 based servers and want to help test this beta release before general public release via auto updates, here's the commands to upgrade install CSF Firewall v16.33 - it won't overwrite your existing CSF Firewall settings.

CSF Firewall v16.33 beta release install/upgrade commands. Re-running same command over again will update to a newer v16.33-beta labeled release.

Code (Text):

cd /usr/src
rm -fv csf.tgz
wget https://download.centminmod.com/csf-beta/csf.tgz
tar -xzf csf.tgz
cd csf
sh install.sh

Code (Text):

csf -v
csf: v16.33-beta (generic)

The newer v16.33-beta release includes a forced beta release update command

Code (Text):

csf -ubf

Code (Text):

       -c,  --check
              Check for updates to csf but do not upgrade

       -u,  --update
              Check for updates to csf and upgrade if available

       -uf    Force a checked reinstall from the stable channel

       -ud    Downgrade csf to the previous release (e.g. roll back to the
              last known-good version) using the mirror's /csf-previous/ path.
              Packages are downloaded over TLS and SHA256-verified, like -u

       -ub    Update csf to the beta release published on the mirror's
              /csf-beta/ path when it is newer under labelled release ordering.
              16.33-stable is newer than 16.33-beta; -ud is the explicit rollback.
              Beta packages are TLS- and SHA256-verified

       -ubf   Force a checked reinstall from the beta channel. Mirror rebuilds
              ship under the same 16.33-beta label, so -ub (label comparison)
              never picks one up; -ubf bypasses the ordering gate like -uf and
              still TLS- and SHA256-verifies the package

CSF Firewall v16.33 beta change log here.

If you want to switch back to CSF Firewall v16.32 latest release:

Code (Text):

cd /usr/src
rm -fv csf.tgz
wget https://download.centminmod.com/csf.tgz
tar -xzf csf.tgz
cd csf
sh install.sh

Feedback and bug reports can be made within this thread.

---

 

I maintain Centmin Mod's own CSF fork and it also tracks and backports cPanel's CSF Fork fixes and security fixes Centmin Mod's CSF Fork 16.33 stable is nearly ready with cPanel's latest security fixes. Though these security issues don't impact default Centmin Mod CSF installations, I still have backported the security fixes and other fixes not available in cPanel's CSF fork