Skip to content

v15.01 to Newer

This page describes the steps required to update CSF from an older version maintained by us to the most recent release.

If your system is currently running CSF v15.00 originally developed by Way to the Web, you must first perform a one-time manual update by following the instructions in the chapter Update: v15.00 to Newer. This initial update is mandatory before you can use the built-in automatic update system.





About Versioning

These docs break CSF up into two distinct development eras:

Version Range Codename Developer Description This Page Covers
v15.01 & Newer Modern Aetherinox After August 2025
v15.00 & Older Legacy Way to the Web Before August 2025


The final release of CSF v15.00 by Way to the Web Ltd. removed all automatic update functionality. After this release, the company shut down their website, rendering all versions of CSF prior to August 2025 (v15.00 and older) unable to perform automatic updates.

CSF v15.01 is the first version maintained by our repository, which restores automatic update functionality by introducing new servers.

Any server using CSF v15.00 and older, should be migrated to this repository’s maintained version of CSF v15.01 and newer, if you want automatic updates to function again.


Perform Update

Before You Update ...

Make sure to back up any important configuration files located in /etc/csf/.

Although existing files are never overwritten during the update process, it is strongly recommended to create backups before proceeding, as a general best practice.

If you are already running on an existing version of CSF from our repository, the update process is simple.

These instructions assume that you currently have CSF v15.01 or newer installed on your server, and are looking to update to the latest version.

There are a few methods you can use for updating CSF, pick one:



Using Command Line

To update CSF automatically, you can run the terminal command to check for updates:

sudo csf -c

sudo csf --check


You should see one of the following, if an update is available or not:

A newer version of csf is available - Current:v15.09 New:v15.10

csf is already at the latest version: v15.10


If you want CSF to update automatically without performing a check first, use the command below. If a newer version is available, it will install immediately without any prior notification.

sudo csf -u

sudo csf --update


You can also run a forced update, which installs the latest version of CSF available regardless of whether an update is found. This command will overwrite the current installation files even if you already have the latest version.

sudo csf -uf


The update process is automatically completed by the command you execute. Afterward, the CSF and LFD services will restart and you can now use CSF as normal.



Using install.sh script

To update CSF manually, verify the current version with the command below:

sudo csf -v

csf: v15.09 (generic)


Once you have established the current running version, you can check our official repository releases page for the latest version available.

To download the latest version, grab it using one of the commands below:

# Using wget (tgz)
wget https://download.configserver.dev/csf.tgz

# Using curl (tgz)
curl -O https://download.configserver.dev/csf.tgz

# Using wget (zip)
wget https://download.configserver.dev/csf.zip

# Using curl (zip)
curl -O https://download.configserver.dev/csf.zip


Decompress / unzip the downloaded archive file:

tar -xzf csf.tgz -C /tmp

unzip csf.zip -d /tmp


Run the CSF installation script:

sudo sh /tmp/csf/install.sh


Follow any instructions on-screen. If prompted for any additional information, enter it. Once the wizard completes, you can confirm if CSF is installed and functioning by accessing your server via SSH, and running the CSF version command:

sudo csf -v

csf: v15.10 (generic)


Confirm the status of csf by running:

sudo systemctl status csf

● csf.service - ConfigServer Security & Firewall - csf
    Loaded: loaded (/lib/systemd/system/csf.service; enabled; vendor preset: enabled)
    Active: active (exited) since Mon 2025-11-19 23:45:04 UTC; 14 seconds ago
  Main PID: 597 (code=exited, status=0/SUCCESS)
        CPU: 0min 14.956s

Notice: journal has been rotated since unit was started, output may be incomplete.



Using Web Interface

If you have the CSF web interface enabled, you can install updates directly from the interface.

Enabling The Web Interface

If you have not yet enabled the CSF web interface and want to, read the instructions on the page Enable Web Interface.


Open the CSF web interface in your browser using the IP address and port configured in /etc/csf/csf.conf. By default, the interface listens on port 6666 [^1].

https://127.0.0.1:6666


CSF Login Interface
CSF Login Interface


On the home page of CSF, you'll see one of two buttons:

  1. Manual Check
    • Displays when the automated system has not yet detected a newer version available.
  2. Upgrade CSF
    • Displays when the automated system has located a newer version of CSF available to install.


CSF Update Option 1 CSF Update Option 2


Performing a Manual Check will connect to the CSF servers and check for available updates.

CSF Manual Update
CSF Manual Update


If updates are available; they will be downloaded and installed. The CSF & LFD services will be restarted. Once the page refreshes, you will now be on the current version of CSF.





Next Steps

Select what documentation you would like to proceed with next ...

  •   Start System Services

    Starting CSF requires disabling testing mode and enabling the firewall so it runs normally.

    This chapter explains how to start both CSF and LFD services and ensure they launch on boot.

    You’ll also find troubleshooting tips for common startup errors and how to fix them quickly.

  •   Enable Web Interface

    The web interface lets you manage your firewall through a browser instead of a command line.

    This chapter covers installation of dependencies, enabling the interface, and whitelisting your IP for security.