[How-to] CSF Support in Hestia CP

[bubblecatcher]

what is the status of this, does the guide working with latest version?

thanks

[martineliascz]

@bubblecatcher For now you can use my steps and a mix of @indianets. Thanks!

[MAN5]

*** as of today, HestiaTeam is not providing any supporting yet for CSF, due to strong reasons behind there…

But there are ways to have it working within hestia UI…

ref: How to install CSF on Hestiacp web ui [config firewall] | Guest Blog Posting

Just run this below command as ROOT user from your linux terminal. (Tested with Hestia v1.7.3 * Ubuntu 20.x)

wget https://raw.githubusercontent.com/vvcares/hestia/master/hestia_csf_install.sh && bash hestia_csf_install.sh

The above command will do as below:

1. Download the script from vvcares-github repo
2. It will check if there is an existing CSF installation in ‘/etc/csf/’.
3. If exists, it will proceed to Step#5
4. If not exist, it will install fresh/new CSF firewall
5. It will automatically add the hestiacp backend port into ‘CSF.CONF > TCP_IN’
6. Create an additional folder called ‘csf folder’ inside ‘/usr/local/hestia/web/list/’
7. Add the CSF link button into your ‘hestiacp panel > in main admin dashboard only’ & Exit.

It is important to note that CSF should not be your only line of defense for securing your server. You should also follow best practices for server security, such as keeping your server software up-to-date, using strong passwords, and limiting access to only necessary users and services.

[sujit]

@MAN5

*** as of today, HestiaTeam is not providing any supporting yet for CSF, due to strong reasons behind there…

Due to strong reasons behind there what?

I haven’t explored CSF since few years. Is there anything a user should be concerned about before trying CSF?

[MAN5]

CSF has lot of unique settings can filter/blocking etc.,
commercial server, Im using this combo for few years.

If the team supports for CSF, there will be tons of questions will arise & have to spend time for troubleshooting for a 3rd party’s application.

[DSystem]

Hello! Can you update the Blog link?

The Github link is also broken.

[MAN5]

@MAN5

wget https://raw.githubusercontent.com/vvcares/hestia/master/hestia_csf_install.sh

Hi, its working well.
I tried just now both to VVCARES.COM & GITHUB. Both are working well…

[DSystem]

Oops. The Github link is ok. I copied the wrong link here.

The Blog does not have a broken link. It’s Cloudflare blocking access.

Your script is perfect!!! It worked here with Debian 11 and hesciaCP v1.8.11

Do you disable fail2ban to use CSF

[MAN5]

Hi, In my preduction server, Im running about ~20 sites in my server.
I’m just using CSF+Fail2Ban together, running smoothly. But some says, F2B is not needed. Just CSF is enough. But Im not sure.

[Alex_Black]

Hello everyone, I have recently started using your panel, which I find quite simple to use and customize. Therefore, I am providing you with this modification to the control panel, which is definitely more convenient for the CSF firewall.

If you have installed the CSF firewall, you need to uninstall it and install the one mentioned on the previous pages. Then, add the PHP code provided.

Update PHP so that only the admin user can view it

nano /usr/local/hestia/web/templates/includes/panel.php

<!-- CSF tab section start -->
<?php
// Set default variables for CSF
if (!isset($_SESSION["CSF_SYSTEM"])) {
    $_SESSION["CSF_SYSTEM"] = true; // Enable CSF system by default
}
if (!isset($panel[$user]["CSF"])) {
    $panel[$user]["CSF"] = "unlimited"; // Set CSF limit, can be a number or 'unlimited'
}
if (!isset($panel[$user]["U_CSF"])) {
    $panel[$user]["U_CSF"] = 0; // Number of CSFs currently used
}

// Check if the user is admin
$is_admin = isset($user) && $user === 'admin';

// Display CSF tab only if the CSF system is active and the user is admin
if ($_SESSION["CSF_SYSTEM"] && $is_admin) { ?>
    <li class="main-menu-item">
        <a class="main-menu-item-link <?php if ($TAB == 'CSF') echo 'active' ?>" href="/list/csf/" title="<?= _("CSF") ?>: <?= $panel[$user]['U_CSF'] ?>&#13;<?= _("Limit") ?>: <?= $panel[$user]['CSF'] == 'unlimited' ? '∞' : $panel[$user]['CSF'] ?>">
            <p class="main-menu-item-label"><?= _("CSF") ?><i class="fas fa-shield-alt"></i></p>
            <ul class="main-menu-stats">
                <li>
                    <?= _("CSF") ?>: <?= $panel[$user]["U_CSF"] ?> / <?= $panel[$user]["CSF"] == "unlimited" ? "<span class=\"u-text-bold\">∞</span>" : $panel[$user]["CSF"] ?>
                </li>
            </ul>
        </a>
    </li>
<?php } ?>
<!-- CSF tab section end -->

[webmasteroffers]

I am waiting for the native support from HestiaCP. By using hacks, you may have many issues and troubles.

[Alex_Black]

It’s a simple PHP modification that doesn’t affect the Hestia panel. If the staff later updates it with a module or plugin, I’d be happy to implement it.

[martineliascz]

@Alex_Black & @MAN5 - I marked your reply as a Solution. Thank you for the update!

Btw, CSF stands out as an exceptional firewall, and I highly recommend it to others…