CSF 5.60 released
Posted on: 08/13/2012 09:02 PM

ConfigServer has released CSF 5.60

CSF 5.60 released


- Added new options to include the Spamhaus Extended DROP list. These additional netblocks are included in the main Spamhaus chain. The feature uses LF_SPAMHAUS_EXTENDED and LF_SPAMHAUS_EXTENDED_URL which are enabled by default, but used only if LF_SPAMHAUS is enabled. To force a reload of the SPAMHAUS list to include the Extended list, delete /etc/csf/csf.spamhaus file after upgrading to this version and then restart lfd

- Added new options to allow blocking of TOR Bulk Exit nodes. This works in the same manner as the LF_SPAMHAUS and LF_DSHIELD options. The feature uses LF_TOR and LF_TOR_URL and is disabled by default. Warning: This could block legitimate users who are trying to protect their anonymity, so use with caution

- Fix LF_NETBLOCK to skip IPv6 addresses as it is unsupported as has long been stated in csf.conf

- Added missing </pre> html elements in UI

- Added unblock button to UI IP searches when results is either in csf.deny or a temporary block

- Implemented a locking system to mitigate iptables stability issues when loading concurrent iptables chains in lfd

- Fixed bug in the display of the 30 days ST_SYSTEM stats

- Added new option ST_SYSTEM_MAXDAYS. This allows you to define the maximum number of days of stats to collect (default 30 days)

- Increased stats graph sizes

- Added CIDR checking of csf.allow to the CLI command csf --deny

- Added checking of csf.ignore to the CLI command csf --deny

Printed from Linux Compatible (http://www.linuxcompatible.org/news/story/csf_5_60_released.html)