cwp-securitylisted

# CWP Security Management If the user provides specific details via "$ARGUMENTS", focus the response on that security topic. For example: `/cwp-pro-centos:cwp-security block IP 1.2.3.4` will focus on blocking that specific IP. Manage CSF Firewall, ModSecurity, SSL/TLS certificates, SSH hardening, and server security on CWP servers. Handle firewall rules, WAF configuration, certificate management, and security auditing. ## Security Components | Component | Purpose | Status | |---|---|---| | CSF Firewall | Network firewall | Discontinued -- use Aetherinox fork | | ModSecurity | Web application firewall | Active | | Comodo WAF | ModSecurity ruleset | Abandoned -- use OWASP CRS | | AutoSSL | Automatic SSL certificates | Active (CWP Pro) | | Snuffleupagus | PHP security module | Active | | CWP Secure Kernel | MAC-based kernel protection | Active (paid feature) | ## CSF Firewall ### Important Notice The original CSF Firewall was discontinued in August 2025. Use the Aetherinox fork (v15.08+) for continued support and updates. ### Installation ```bash # Install iptables on AlmaLinux (prerequisite) yum install iptables ``` ### Core Commands ```bash # Enable/disable csf -e # Enable firewall csf -x # Disable firewall csf -r # Restart firewall # IP management csf -g IP # Check why IP is blocked csf -d IP # Block IP permanently csf -dr IP # Unblock IP csf -a IP # Whitelist IP csf -ta IP 86400 # Temporary whitelist (24h in secon