Firewall and CSF Missing After CyberPanel 2.4.3 Update

Problem Description:

I recently updated my CyberPanel to version 2.4.3 (commit: a4791035d08e642283f07dcae4756330f1a9d01a), and I’m experiencing issues with the firewall functionality. After the update:

• The CSF (ConfigServer Security & Firewall) has disappeared from the control panel
• When trying to access firewall settings, I get a “not found” error screen
• The firewall management interface is completely inaccessible

System Information:

• CyberPanel Version: 2.4.3
• Commit Hash: a4791035d08e642283f07dcae4756330f1a9d01a
• Previous version worked fine with CSF

What I’ve Tried:

• Checked if CSF is still installed on the system
• Looked for any error messages in logs
• Attempted to access firewall settings through different menu paths

Questions:

1. Is this a known issue with CyberPanel 2.4.3?
2. Has CSF support been intentionally removed or disabled in this version?
3. Are there any official workarounds or fixes available?
4. Will CSF support be restored in future updates?

Impact:
This issue is critical as it leaves my server without proper firewall protection. Any guidance or solutions would be greatly appreciated.

Additional Notes:
The server was functioning normally before the update, and CSF was properly configured and working. The issue appeared immediately after completing the update to version 2.4.3.

It’s been removed because ConfigServer is shutting down: See github commit a4791035d08e642283f07dcae4756330f1a9d01a

No, that is still incorrect behavior on CyberPanel’s part and a gross misunderstanding of and negligence in the handling of what the software’s EOL and company’s closure means for ConfigServer users. Per ConfigServer (CC: @usmannasir), the software will still work without updates and they are opening the source code as well. Thus, unless I give permission or advise me during install (with an option to retain), CyberPanel shouldn’t be deleting or removing software that still works and I need. Further, the blocklists are actively updated by the third parties independent of the software’s development state. Like many, I use its LDF to protect my server and your removal or hiding of it is not what I have approved. ConfigServer is vastly superior to the built-in plain-Jane firewall even without regular updates.

Can I keep using the software I have installed on my server after 31 August?

Yes, you can keep using the software as long as you update it to the latest version before the 31st of August. After that date, if you have not upgraded to the latest version, the software will stop working. This applies to ConfigServer eXploit Scanner, Outgoing Spam Monitor, and MailScanner Front-End.

Will your free scripts continue to work after the 31st of August?

Yes, ConfigServer Mail Manage (csm), CS Mail Queues (cmq), CS Modsecurity Control (cmc), CS Explorer (cse) and ConfigServer Security & Firewall (csf) will continue to work. They will no longer be updated, however, and will not be available for download or install.

Source:

Here is a mirrored copy of the latest version of ConfigServer Security and Firewall for those who need it:

https://1drv.ms/u/c/2e27fe2f55eeb04e/EWfTnnqSSxxFkPZD27iyqoABOMe24sHWm0Byrv-YUesxcA?e=HMeWxj

I’m not on their team, I just noticed the update on GitHub. I agree more advanced notice would have been better, though in fairness, ConfigServer didn’t give much notice either.

True as far as ConfigServer is concerned. On the same token, however, CSF will continue to work as it is in a mature state. The software has remained stable for years and has needed virtually no refinements or tweaking outside of the CyberPanel integration that happened years ago. Further, the built-in firewall does not offer the proactive protection or advanced blocklists of CSF. Throwing the baby out with the bath water for preexisting installations is not an appropriate approach. In fact, CSF has been a lifesaver against hackers for my installations and I would never go without it.

But then the CSF web interface will also no longer be available under CyberPanel?

You are correct, CSF and the interface is removed but you can reinstall it together with the interface by executing the following:

#backup current csf configuration
zip -r csf-backup.zip /etc/csf/

#Reinstall CSF
#The below line no longer works in 2.4.4
/usr/local/CyberCP/bin/python3 /usr/local/CyberCP/plogical/csf.py installCSF

#Alternate CSF install
bash <(curl -s https://sajetekengineering.com/wp-content/uploads/cyberpanel/install_csf_cyberpanel.sh) skip

#Fix for saving the configurations in 2.4.x
if ! grep -q "configservercsf" /usr/local/CyberCP/CyberCP/secMiddleware.py; then sed -i -E "s/if.*valueAlreadyChecked == 0/& and request.path != '\/configservercsf\/iframe\/'/g" /usr/local/CyberCP/CyberCP/secMiddleware.py; fi
find /usr/local/CyberCP/ -type d -name __pycache__ -exec rm -r {} \+ && systemctl restart lscpd && systemctl restart lsws

#Restore CSF configurations and restart CSF
unzip -o csf-backup.zip -d /
csf -r

Thank you @sajetek_developer

instead of removing, why isn’t CSF replaced with this fork?! GitHub - Aetherinox/csf-firewall: ConfigServer Firewall (CSF) - new dark theme, setup guides, Docker and OpenVPN support. Constantly updated IP Blocklists (for any firewall, host file). Includes Traefik integration with Authentik and ip whitelisting middlewares.

I use ALMA Linux and that one line was all I needed to get the firewall page back up, will likely need to config it again as I did not do the saving of config etc in the earlier step.
But thanks for this I was trying to work out what had happened and why the firewall page just stopped working.

I don’t like the idea of any control panel removing a software package that was installed and running.

Sounds like an apple move.

The WordPress version isn’t an option for the Whole Server or for sites not running WP.

Firewalld is pre-installed and default firewall.

CSF was optional since long time and now that csf is discontinued, its removed from the panel.

This worked, before, but now I can no longer issue SSL via LetEncrypt, like before.
It gives this error when trying to issue an SSL cert.

Operation Failed!
Traceback (most recent call last):
File "/usr/local/CyberCP/plogical/virtualHostUtilities.py", line 17, in
django.setup()
File "/usr/local/CyberCP/lib64/python3.9/site-packages/django/__init__.py", line 24, in setup
apps.populate(settings.INSTALLED_APPS)
File "/usr/local/CyberCP/lib64/python3.9/site-packages/django/apps/registry.py", line 124, in populate
app_config.ready()
File "/usr/local/CyberCP/configservercsf/apps.py", line 10, in ready
import configservercsf.signals
File "/usr/local/CyberCP/configservercsf/signals.py", line 3, in
from firewall.signals import preFirewallHome, preCSF
ModuleNotFoundError: No module named 'firewall.signals'

I’m, currently on version 2.4.5 and used the line “bash <(curl -s https://sajetekengineering.com/wp-content/uploads/cyberpanel/install_csf_cyberpanel.sh) skip” to install it.

I did also try this: But admittedly it’s quite an old topic, and probably no longer relevant.

I, also, found a new fork for CSF, but it just results in 500 errors when accessing the control panel.

Any ideas? I’d really like something more robust than Firewalld.

Update:
I gave up on CSF fully working, and not causing other issues.
I uninstalled CSF, and reactivated Firewalld when I found this:

Configuring it was pretty easy. While not quite as potent and easy as CSF, it is working, and already blocking IP’s trying to bruteforce their way in.

[root@vps3036784 action.d]# sudo fail2ban-client status sshd
Status for the jail: sshd
|- Filter
|  |- Currently failed:	1
|  |- Total failed:	2
|  `- Journal matches:	_SYSTEMD_UNIT=sshd.service + _COMM=sshd + _COMM=sshd-session
`- Actions
   |- Currently banned:	3
   |- Total banned:	3
   `- Banned IP list:	106.251.244.178 173.249.41.171 195.250.72.168
[root@vps3036784 action.d]# sudo fail2ban-client status dovecot
Status for the jail: dovecot
|- Filter
|  |- Currently failed:	0
|  |- Total failed:	35
|  `- Journal matches:	_SYSTEMD_UNIT=dovecot.service
`- Actions
   |- Currently banned:	3
   |- Total banned:	3
   `- Banned IP list:	66.132.224.80 66.132.172.176 164.92.87.77
[root@vps3036784 action.d]# 

https://github.com/Aetherinox/csf-firewall

This version of CSF, actively supports CyberPanel.