Good news! If you read my earlier fix — “How to fix CSF firewall error: Oops! Unable to download (no host option provided)” — this maintenance release makes that workaround largely unnecessary going forward. CSF v15.01 restores automatic updates and introduces a few safety tweaks and docs, so your servers should keep themselves current again.
👉 In case you missed it, here’s my original post for background:
How to fix CSF firewall error “Oops! Unable to download (no host option provided)” — published Sept 6, 2025
https://www.jaspreet.net/2025/09/06/3180/how-to-fix-csf-firewall-error-oops-unable-to-download-no-host-option-provided/
What changed in v15.01 (quick summary)
- Auto-update & mirrors restored – CSF can update itself again; release also adds a
.tgzpackage to match legacy install flows. GitHub - New download + blocklist services –
download.configserver.dev(updates) andblocklist.configserver.devare live. GitHub - Security default – new
UI_BLOCK_PRIVATE_NEToption (default 1). GitHub - Docs are up – central documentation hub is online (still growing). docs.configserver.dev
Net-net: If you’re on v15.x, your node should start pulling updates normally again without the manual mirror hack from my earlier post. GitHub
Which hosting panels does CSF still work with?
Below is the current state from official docs and vendor notes. I’ll keep this section pragmatic — i.e., “does it work today?”
| Panel | Status with CSF | Notes / Docs |
|---|---|---|
| cPanel/WHM | ✅ Works (3rd-party) | cPanel documents the required ports and notes CSF is a third-party tool that their support doesn’t maintain. Use WHM CSF plugin/UI as before. cPanel & WHM Documentation |
| DirectAdmin | ✅ Works (natively integrated) | DirectAdmin has direct CSF integration (since DA 1.61.0) and an up-to-date CSF guide. docs.directadmin.com |
| Webmin / Virtualmin | ✅ Works (Webmin module) | Install CSF then add the csf Webmin module (/usr/local/csf/csfwebmin.tgz) for a native UI. Virtualmin Community |
| CyberPanel | ⚠️ UI removed in 2.4.4 | CyberPanel removed CSF support (EOL rationale). You can still run CSF manually, but the CP UI bits are gone. CyberPanel |
| CWP (Control Web Panel) | ✅ Works (built-in module) | CWP ships a CSF Firewall module: Security → CSF Firewall. wiki.centos-webpanel.com |
Why this release matters (in plain English)
- You get normal updates again. v15.01 re-enables CSF’s update flow, pointing it to new mirrors — so routine
csf -uchecks (or the daily cron) work as expected. Fewer manual interventions, fewer “Oops! Unable to download…” errors. GitHub - Stronger defaults for the UI. The new
UI_BLOCK_PRIVATE_NET=1default is aimed at tightening access around the Web UI surface. Good hygiene out of the box. GitHub - Dedicated blocklists. Official blocklist infrastructure is now published, making reputation-based blocking easier to consume. GitHub
- Documentation hub. Having one canonical place for install/usage (with ongoing updates) reduces guesswork moving forward. docs.configserver.dev
How to get the update
Most installs will auto-pick it up. If you want to nudge it:
# Check for updates (no changes)
csf -c
# Update to the latest
csf -u
# Force an update if needed
csf -uf
Those commands are part of standard CSF usage and documented in DirectAdmin’s CSF guide (works anywhere CSF is installed). docs.directadmin.com
If your environment previously relied on my manual mirror steps, you can safely revert to the normal update flow now.
Panel-specific notes (read before you click!)
cPanel/WHM
- cPanel lists the exact ports that must be open for services to work — double-check these after any firewall change. Also note that CSF is third-party (cPanel support won’t configure it for you). cPanel & WHM Documentation
DirectAdmin
- DA has first-class CSF integration and a very practical CSF how-to. Upgrading CSF here should be straightforward. docs.directadmin.com
Webmin / Virtualmin
- Install CSF, then add the Webmin module at
Webmin → Webmin Configuration → Webmin Modules → From local file → /usr/local/csf/csfwebmin.tgz. Virtualmin Community
CyberPanel
- From v2.4.4, CyberPanel removed the CSF UI and related bits. If you keep CSF, manage it via shell (no CP UI). Plan a migration to the panel’s native firewall long-term. CyberPanel
CWP (Control Web Panel)
- Use the built-in Security → CSF Firewall module for day-to-day allow/deny, config, and quick actions. wiki.centos-webpanel.com
FAQ
Q: I’m on CyberPanel and just updated — where did CSF go?
A: CyberPanel 2.4.4 removed CSF support and its UI. CSF can still run independently, but you’ll manage it outside the panel. Consider moving to the panel’s native firewall feature set. CyberPanel
Q: Is CSF still “safe” to use on cPanel now that ConfigServer closed?
A: Yes — CSF continues as a community-maintained fork with v15.x, and cPanel’s docs still outline firewall requirements. Just remember cPanel treats CSF as third-party for support purposes. GitHub+cPanel & WHM Documentation
Q: Where can I read the official v15.01 changelog?
A: The GitHub release notes list every change (auto-updates, new mirrors, UI_BLOCK_PRIVATE_NET=1, blocklist service, .tgz packaging). GitHub
Final thoughts
If you applied the manual mirror fix from my earlier post, upgrade to v15.01 and let CSF manage itself again. Keep an eye on your panel’s specific path (especially CyberPanel), and audit your open ports after the update — particularly on cPanel/WHM. GitHub
