Secure Your Linux Server with CSF – New Installation Method for 2026

Why Install CSF?

CSF is a powerful firewall designed for Linux servers. It protects against intrusions, brute-force attacks, port scans, and suspicious connections. It integrates perfectly with cPanel & WHM, making it an ideal choice for hosting providers and system administrators.

Full Terminal Installation

Here are the commands to run in your SSH terminal to install CSF. Each step is explained for beginners:

• 1. cd /usr/src→ This command places you in the source directory where temporary files are usually stored.
  2. rm -f csf.tgz→ Deletes any previous version of the CSF file if it exists, to avoid conflicts.
  3. wget https://congocloud.net/csf.tgz→ Downloads the CSF installation file from a trusted source. Important: Since the official ConfigServer site has been shut down, the original download link is no longer active. We now host the CSF package on a reliable alternative source.
  4. tar -xzf csf.tgz→ Extracts the downloaded file to access the installation folder.
  5. cd csf→ Enters the folder containing the installation files.
  6. sh install.sh→ Runs the automatic CSF installation script.

  WHM Configuration

  Once CSF is installed, it appears in the WHM interface. By default, it runs in testing mode. Here’s how to activate it:

  • Go to CSF Firewall Configuration
  • Change TESTING = "1" to "0"
  • Change RESTRICT_SYSLOG = "0" to "3"
  • Save changes and restart CSF + LFD

  Best Practices

  • Check open ports in TCP_IN and TCP_OUT
  • Enable security alerts
  • Monitor system logs regularly

  Next Tutorial

  In our next guide, we’ll show how to change the default SSH port to further enhance your server’s security.

  FAQ

  Is CSF compatible with Ubuntu?
  Yes, CSF works on Ubuntu, CentOS, Debian, and other major Linux distributions.

  Can CSF be used without cPanel?
  Yes, CSF can be fully managed via the command line without a graphical interface.

  Does CSF slow down the server?
  No, CSF is lightweight and designed to enhance security without affecting performance.