How to install ConfigServer Security & Firewall (csf) plugin in WHM / Cpanel

ConfigServer Security & Firewall (csf)  is a free and advanced Linux base firewall, you can use this firewall specially for WHM / Cpanel . This is one of best firewall scripts for WHM / Cpanel.

According to ConfigServer , CSF support bellow mentioned OS's:

• RedHat Enterprise v5 to v7 
• CentOS v5 to v7 
• CloudLinux v5 to v7 
• Fedora v20 to v22      
• openSUSE v10, v11, v12  
• Debian v3.1 - v8  
• Ubuntu v6 to v15  
• Slackware v12

Also supported following  Virtual Servers:

• Virtuozzo
  VMware
  Xen
  VirtualBox
  OpenVZ
  UML
  MS Virtual Server
  KVM

 Overview of csf features :

• Straight-forward SPI iptables firewall script
• Daemon process that checks for login authentication failures
• OP3/IMAP login tracking to enforce logins per hour 
• SSH login notification
• SU login notification
• Excessive connection blocking
• UI Integration for cPanel, DirectAdmin and Webmin
• Easy upgrade between versions from within cPanel/WHM, DirectAdmin or Webmin 
• Block traffic on a variety of Block Lists including DShield Block List and Spamhaus DROP List
• Server Security Check
•  Port Flooding Detection - Per IP, per Port connection flooding detection and mitigation to help block DOS attacks , etc...

ConfigServer Security & Firewall (csf) Installation:

Open and login into your SSH command line ( you can use PuTTY)

• cd /usr/src
• cd /usr/src
• rm -fv csf.tgz
• wget https://download.configserver.com/csf.tgz
• tar -xzf csf.tgz
• cd csf
• sh install.sh

Next, test whether you have the required iptables modules:

• perl /usr/local/csf/bin/csftest.pl 

 Then

• Login into WHM -> Plugin ->ConfigServer Security & Firewall 
• Click "ConfigServer Firewall" tab, Click firewall Configuration button
• Search for "TESTING" and switch off testing
•  Scroll down and change the value of "RESTRICT_SYSLOG" from 0 to 3
• Search "SYSLOG_CHECK " default value is 0 just change it to 3600
• In the end of the page click Change and then "Restart csf+lfd"