Installing the new ConfigServer Firewall fork

As many of you will be aware, ConfigServer Firewall was recently discontinued, however, in true open-source fashion it has been forked and now has a new lease of life with regular updates and improvements on https://github.com/Aetherinox/csf-firewall. Below is a quick and dirty install guide for Rocky Linux 9.x but will work on other RedHat derivatives.

dnf -y install perl unzip bind-utils e2fsprogs iptables perl-Math-BigInt perl-File-Copy-Recursive tar
cd /usr/src
wget https://github.com/Aetherinox/csf-firewall/releases/download/15.08/csf-firewall-v15.08.tgz
tar xvf csf-firewall-v15.08.tgz
cd csf
./install.sh

Now you can go ahead and carefully edit /etc/csf/csf.conf to your specification and then start csf. Note we usually disable email notifications hence we omitted sendmail from the dnf install list. If you want to send emails just install and configure your sendmail.

systemctl enable --now lfd
csf -ra