Note
This is a community-maintained fork of CSF. Following the shutdown of the original project and their release of the code under the GPLv3 license in August 2025, this repository serves as a continued development and maintenance effort to keep CSF secure and compatible with modern systems.
CSF is a Stateful Packet Inspection (SPI) firewall, Login/Intrusion Detection and Security application for Linux servers, used by Linix system administrators to secure their infrastructure and simplify server management.
- Stateful Packet Inspection (SPI): Advanced firewall configuration.
- Login Failure Daemon (LFD): Detects and blocks brute-force attacks.
- Extensive Control Panel Support: Integrated UI for cPanel, DirectAdmin, Webmin, and more.
- Security Checks: Automated server security audits.
- Email Alerts: Notifications for blocked IPs, login failures, and system issues.
You can install CSF quickly using one of the following one-liners:
# Using wget
bash <(wget -qO - https://csf.black.host)or
# Using wget
bash <(curl -sL https://csf.black.host)This executes the remote installer, which automates the following steps:
- Installs all necessary CSF dependencies.
- Deploys the latest stable version of CSF.
- Runs
csfteststo validate the installation and ensure everything is configured correctly.
To migrate from v14 or the original v15.00 (from Way to the Web Limited) to this fork, you need to update your download server configuration.
Execute the following command on your server:
echo "download.black.host" > /etc/csf/downloadserversAfter updating the download server, you can either:
- Upgrade immediately: Run
csf -u - Wait for auto-update: The cron script will perform the upgrade automatically.
Any contributions are welcome. Before submitting your contribution, please review the following resources:
This project is licensed under the GNU General Public License v3.0 (GPLv3). See the LICENSE file for details.
The original code was released by Way to the Web Limited https://github.com/waytotheweb/scripts but was subsequently removed from GitHub. Consequently, GitHub now incorrectly identifies a repository by mappy9211 as the primary source.
This fork continues the legacy of Way to the Web Limited and Jonathan Michaelson, with the goal of ensuring this project remains free forever.