csf.php // config generator

🔥 CSF Firewall Config Generator

🛡️ Tuned for Webuzo and persistent-connection apps. Every change is explained.

⚡ 01 / Configure

🖥 Control Panel

Webuzo enduser (2002/2003) and admin (2004/2005) panels

🔒 Admin Panel Ports

Comma-separated. Auto-filled from panel choice. Edit if you customized.

📡 App / Chat Ports

Your Node/PM2/socket.io ports — excluded from connection-tracking limits so WebSockets are never killed.

💻 SSH Port

Change from 22 if you've moved SSH (recommended for production).

🛡 Security Level

Recommended. Tuned for chat apps with persistent connections.

✉ Alert Email

lfd notifies you when an IP is blocked. Skip and you fly blind.

Enable IPv6 firewall

Turn off only if your VPS has no IPv6 interface.

Use IPSET for blocklists

Required if you block countries. O(1) lookups instead of O(n) iptables.

Enable port-scan detection

Blocks IPs probing closed ports.

Show 'why blocked' page

Helps real users self-recover. Slight info disclosure.

Block high-risk countries

Blunt instrument — also blocks legit travelers/VPNs. Needs free MaxMind license key.

Countries to block

CN China ★

RU Russia ★

KP North Korea ★

IR Iran ★

VN Vietnam

TR Turkey

RO Romania

UA Ukraine

BR Brazil

ID Indonesia

NG Nigeria

PK Pakistan

🔥 csf.config // generator — verify every value against your specific traffic patterns. test before production.

Created by Refat Rahman · Facebook · GitHub