-
Notifications
You must be signed in to change notification settings - Fork 258
Integrations Guide
Home · Security Features Guide
- Integrations extend CSF beyond local host-only controls.
- Pick integrations based on topology: panel-managed, reverse-proxy, or multi-node estate.
- Validate client-IP visibility and trust boundaries before enabling automation.
Use when admins need browser-based operations and policy visibility.
Use when blocked users should see a deterministic block page/message instead of silent connection failures. Prefer Messenger v3 where platform support exists.
Use when origin-side blocking is insufficient because traffic arrives via reverse-proxy edges. Note that automatic Cloudflare sync is intentionally limited to specific trigger classes (primarily LF_MODSEC/LF_CXS).
Use when you need cross-node block intelligence sharing and controlled cluster-wide actions. Treat delivery as best-effort and validate timeout/recovery behavior in advance.
Use when panel-specific behavior influences service paths, templates, auth flow, and UI/control-plane ownership.
Use when no control panel abstraction exists and policy is managed directly.
- Confirm real client IP visibility in logs/app stack.
- Define rollback path (console access + known-good config).
- Enable one integration at a time.
- Capture baseline logs before/after activation.
csf -ra
systemctl status lfd 2>/dev/null || service lfd status
tail -n 100 /var/log/lfd.logAlso validate that trusted admin workflows still succeed after each integration change.
- Integrating edge controls before confirming client-IP restoration.
- Enabling UI surfaces without strict allowlists.
- Mixing temporary and permanent automation workflows without cleanup strategy.
- Changing several integration layers in one maintenance window.
Last reviewed: 2026-02-27
- Security Features Guide
- Cloud & Container Hardening
- Automation & IaC
- IPv6 Deployment & Hardening
- IP Block Lists
- Reference Map
- Introduction
- csf Principles
- lfd Principles
- csf CLI Options
- lfd CLI Options
- Login Tracking
- Regex Custom Cookbook
- Script Email Alerts
- Process Tracking
- Directory Watching
- Advanced Filters
- Multiple Ethernet
- Generic Linux
- FTP Issues
- Messenger Service
- Block Reporting
- Port Flood
- Pre/Post Scripts
- Port Knocking
- Connection Limit
- Port/IP Redirect
- Integrated UI
- RESTRICT_SYSLOG
- Exim SMTP AUTH
- UI Skinning
- InterWorx
- CentOS Web Panel