v15.08

Release Info

Item	Value
🏷️ Version	v15.08
📕 Blog	https://docs.configserver.dev/blog/2025/release-v1508/
🕟 Stamp	15.07-2025-10-24T13:08:43.000Z 🔺 15.08-2025-12-13T00:03:23.000Z
📅 Last Release	49 days ago
📄 csf-firewall-v15.08.tgz	ConfigServer Firewall app 2eb48077b8ecd672a666915700f20564036ef9f5cdc984dca098869e82a21f7d
📄 csf-firewall-v15.08.zip	ConfigServer Firewall app 99513f1943c4adf5cf4a937219bc7c52344e4ed5b8283b8fff58b683916bb76e
📄 csf-firewall-v15.08-helpers.zip	Helper patches. View README for instructions e96742578186b14264b00658c99b59550f3974a4f6b79ea6ded177b27ea5f0c5

---

What's New

This release contains the following changes:

• feat(cron): Perl cron csget re-written
  • Now compatible with all distros
  • Utilizes tertiary redundancy system for fetching updates:
    • /usr/bin/wget
    • /usr/bin/curl
    • /usr/bin/GET
  • New flags added:
    • -r, --response
    • -n, --nosleep
    • -k, --kill
    • -l, --list
    • -d, --diag
    • -D, --debug
    • -v, --version
    • -h, --help
• feat(cli): new port management console commands via PR #57
  • --addport, -ap: Add a new port to your whitelist
  • --removeport, -rp: Remove an existing whitelisted port
  • --listports, -lp: List all ports that are whitelisted within your /etc/csf/csf.conf
• feat(install): install scripts install.*.sh now detailed and proper output to user
• feat(cwp): add logic to mitigate immutable flag +i on cwp installs; restore flag after install complete
• feat(webmin): automatically install webmin module /usr/local/csf/csfwebmin.tgz
  • No longer requires webmin module to be manually imported
• pref(blocklist): optimize blocklist generation scripts
• refactor(cwp): centos web panel nav menu label for CSF changed
  • Renamed from ConfigServer Scripts to ConfigServer Firewall
• refactor(license): update json response structure for license / insiders service
• refactor(scripts): bash script protect.sh now POSIX compliant
• refactor(install): make all bash install.*.sh installation scripts POSIX compliant
• feat(core): add warning message if LF_MODSEC_PERM threshold below 3600 seconds (1 hour)
• chore(core): add comment to csf.conf files to specifyinput value type for LF_MODSEC_PERM
• chore(core): update config description for LF_MODSEC
• chore(webmin): add property longdesc to module.info in CSF webmin module
• chore(general): clean up files no longer used by application
• chore(general): revise csf.blocklists with updated urls to the various blocklist services
• fix(cwp): centos control panel menu link csfofficial returned blank page
• fix(core): prevent output if latest version and no terminal present, stops unnecessary update notifications; adds #no critic
• fix(blocklist): remove duplicate entries from highrisk static blocklist
• fix(scripts): add shellcheck directive to extras/scripts/protect.sh
• fix(cron): cron csget incorrectly assigned wrong user:group to file; triggered SELinux security error
  • update install.*.sh scripts to assign root:root
• docs(mkdocs): add new chapter Advanced

---

Statistics

How the files have changed:

• Changed files : 300
• Changes : 1192560
• Commits : 199
• Additions : 1186117
• Deletions : 6443
• PRs (categorized) : 87
• PRs (uncategorized) : 112
• PRs (open) : 0

---

Statistics

How the files have changed:

• Changed files : 300
• Changes : 1192560
• Commits : 199
• Additions : 1186117
• Deletions : 6443
• PRs (categorized) : 87
• PRs (uncategorized) : 112
• PRs (open) : 0

---

Pull Requests

This release is associated with the following pull requests:

🪛 Continuous integration

• (ipset) switch over to new artifact server : 34729d8 @Aetherinox
• (blocklist) update script bl-block for highrisk : 510b95d @Aetherinox
• (contributing) update : f97ba3f @Aetherinox

🚀 Features

• (install) add dynamic SYSLOG_LOG and IPTABLES_LOG on install #41 : 3ea9e59 @Aetherinox
• (webmin) automatic webmin installation #33 : 43d3561 @Aetherinox
• add warning if LF_MODSEC_PERM too low #59 : 397a421 @Aetherinox
• enhanced output during installation : 8689436 @Aetherinox
• (install) copy new csget cron file if source and dest mismatch : f132e4f @Aetherinox
• (csget) update update module : 58c1144 @Aetherinox
• (csget) add --help menu : c67115f @Aetherinox
• (csget) new flag --response; split output to log file and terminal : d7e1f96 @Aetherinox
• (csget) add new --help menu, update checker : a635c42 @Aetherinox
• (install) add --dryrun flag to install scripts : eb83292 @Aetherinox
• (cyberpanel) add mod output to terminal when applying : 72e2195 @Aetherinox
• (csf) add warning to console output when using default web ui username and password : 6a8d569 @Aetherinox
• (cli) add command --addport, -ap #57 : ac9e05a @Aetherinox
• (cli) add command --removeport, -rp #57 : 3ba60d1 @Aetherinox
• (cli) add command --listports, -lp #57 : 05a2535 @Aetherinox
• (license) add new funcs for license and insiders checks : 86ff221 @Aetherinox

🐛 Bugfixes

• remove debug print from displayui : f63d64e @Aetherinox
• (blocklist) remove dupes from static list highrisk #46 : 777ee0e @Aetherinox
• update insiders response structure : 406bfc8 @Aetherinox
• (cwp) address cwp file copy with immutable +i flag : b76087c @Aetherinox
• (cwp) fix csf page not loading after last update : 7520fb8 @Aetherinox
• diagnostics module no longer required in production #58 : 10ac561 @Aetherinox
• add proper user:group assignment for root to csget cron #58 : 995bf12 @Aetherinox
• (ci) gracefully stop workflow if conditions not met #63 : 7fbc533 @Aetherinox
• the "not-so-graceful" abort job #63 : 898c70a @Aetherinox
• (install) switch to literal UTF8 char instead of unicode for icons; fixes ubuntu : b51ee7b @Aetherinox
• (install) add reset to log output : c4b3a73 @Aetherinox

🔧 Changes

• (webmin) add module.info longdesc : 8da88bd @Aetherinox
• update config description for LF_MODSEC #59 : a4a2759 @Aetherinox
• add input value type to LF_MODSEC_PERM comments #59 : 78a50b9 @Aetherinox
• (ipset) add ShadowServer foundation to blocklist : c3fc399 @Aetherinox
• update insiders link to docs in webui : 18cce13 @Aetherinox
• build version 15.08 : 423c7ed @Aetherinox
• (cwp) update left nav menu for csf : 5c589fd @Aetherinox
• (csf) update csf.blocklists with current urls and header #50 : d43fa75 @Aetherinox
• (csf) update log functionality output for users : ec33961 @Aetherinox

n#### ✨ Optimizations

• (master) optimize loop by removing cat #46 : b9e6be5 @Aetherinox

🧹 Housekeeping

• (posix) make webmin port/protocol fetching posix compliant : fda906e @Aetherinox
• (master) re-write master blocklist; ensure no dupes #46 : 9a9fad3 @Aetherinox
• (highrisk) fix duplicates #46 : 6c51408 @Aetherinox
• (blocklist) update expiration; sources : ce858e7 @Aetherinox
• (csget) better output logs : 984979b @Aetherinox
• (csget) add additional flag alias for --nosleep as --nodaemon : 9bb81e2 @Aetherinox
• (install) ensure flag --dryrun contains boolean : 8e9d766 @Aetherinox
• (generic) update formatting : 9a1625b @Aetherinox
• (csf) update module output for updates : 7f40ff7 @Aetherinox
• (csf) clean up command dictionary : cbc62a6 @Aetherinox

✏️ Docs

• (readme) update blocklist frequency. #46 : ef3d852 @Aetherinox
• (mkdocs) update blocklists page #46 : 96959e5 @Aetherinox
• (mkdocs) flip ipset and blocklist nav menu items position #46 : c0f2c18 @Aetherinox
• (mkdocs) update ipset page #46 : d6a6234 @Aetherinox
• (mkdocs) update javascript for api calls : dc402b0 @Aetherinox
• (readme) add scam warning : 4209444 @Aetherinox
• (readme) add warning indicator to scam message : 9a204b4 @Aetherinox
• (readme) update scam warning : 0a8558b @Aetherinox
• (mkdocs) update insiders : 831115e @Aetherinox
• (mkdos) update api endpoint for insiders : 22000b3 @Aetherinox
• (mkdocs) update navigation menu order : 2d53aaf @Aetherinox
• (mkdocs) update sponsor / insiders library api endpoints : cb545b0 @Aetherinox
• (mkdocs) add webui troubleshooting page : b7b1b51 @Aetherinox
• (mkdocs) update shortcodes python library : 42d450c @Aetherinox
• (mkdocs) update light theme colors : fb06b8f @Aetherinox
• (mkdocs) update template : fb90279 @Aetherinox
• (mkdocs) add new chapter Advanced; add csget module : d51a7f3 @Aetherinox
• (mkdocs) update changelog for v15.08 : 3407a82 @Aetherinox
• (mkdocs) update changelog, blocklist for v15.08 : 069121f @Aetherinox
• (mkdocs) add new badge type arguments : fabd192 @Aetherinox
• (mkdocs) fix badge stylesheet properties for headers : acffdd8 @Aetherinox
• (mkdocs) update changelog for v15.08 : d51272b @Aetherinox

---