Aetherinox

csf-firewall

A community-maintained fork of ConfigServer Security & Firewall (CSF) — a robust Linux iptables/nftables firewall with a free ipset blocklist service.

15.10
Published at
Feb 28, 2026
376
Stars
237,801
Download
Synced at
Oct 4, 2026

The author no longer ships through GitHub Releases, but the repository is still active (last push Sep 27, 2026). Get the latest version from: Project homepage

Latest release

15.10Feb 28, 2026, 01:08 AM
Downloads slow? Switch the source anytime above

README

Project Overview

This is a community-maintained fork of ConfigServer Security & Firewall (CSF) — a robust Linux iptables/nftables firewall with a free ipset blocklist service.

Key Features

  • Firewall & Network Security: iptables/nftables-based Linux firewall
  • Login & User Monitoring
  • Alerts & Notifications
  • Intrusion Detection & Exploit Protection
  • Management & Control
  • IP Sets / Blocklist: Official blocklists, risk assessments, privacy lists, spam lists, and more

Target Audience

  • Linux server administrators
  • DevOps engineers who need robust firewall and intrusion detection
  • Self-hosting users who value server security

Quick Start

  1. Refer to the installation guide
  2. Install dependencies and download CSF
  3. Run pre-installation tests
  4. Execute installation
  5. Disable test mode and start services

Core Advantages

  • Actively maintained community fork
  • iptables/nftables-based, flexible and powerful
  • Includes free ipset blocklist service
  • Comprehensive intrusion detection and exploit protection

System Requirements

  • OS: Linux

Release history

Sort