Url for latest version

[cdbessig]

The old url was: https://download.configserver.com/csf.tgz

This allowed us in some startup scripts to have coded:
wget https://download.configserver.com/csf.tgz

What can we use for the latest version of this release of CSF?

[Aetherinox]

The original developer still owns configserver.com, and even if it were to expire, renewal would probably be some insane amount considering it's been registered since I believe 2004/2005.

So I've registered https://configserver.dev, but it is not set up yet, but that is where the download and scripts will be.

For now, you've got two options to download

Using wget (download github script)

bash <(wget -qO - https://raw.githubusercontent.com/Aetherinox/csf-firewall/main/get.sh)

Using cUrl (download github script)

bash <(curl -sL https://raw.githubusercontent.com/Aetherinox/csf-firewall/main/get.sh)

If you want to use the new domain

Using wget (using new domain)

bash <(wget -qO - https://get.configserver.dev)

Using cUrl (using new domain)

bash <(curl -sL https://get.configserver.dev)

Run one of those two commands in the folder where you want the latest version of csf to be downloaded, because as soon as you run that command, it will immediately download straight to that folder and give you a csf-firewall-v15.00.zip

Extract the zip

mkdir -p /tmp/csf

unzip ./csf-firewall-v15.00.zip \
  -d /tmp/csf

Then you can run the install script:

sh /tmp/csf/install.sh

There was another domain I was going to get which is a lot less characters, but the fewer characters in the domain, the higher the price, and they wanted something like $1000 for the domain. And there's just no reason to pay that. I just figured it would be easier to remember. So I opted for the same name, just different TLD.

Side note: To avoid confusion, when this repo was just tweaks to CSF, we released updates in a .zip. Now that we develop the entire app, we're probably going to migrate over to a .tgz just to avoid confusion.

[Aetherinox]

An added note. I've been working on workers today

There are two new subdomains

• https://get.configserver.dev

  • Allows you to use the commands I provided above to download a script which downloads CSF

    bash <(wget -qO - https://get.configserver.dev)
    

    bash <(curl -sL https://get.configserver.dev)
    

  • The script has a lot of options, which I need to document. But the script allows you to:
    • download only
    • download + extract
    • download + extract + install
    • download + extract + install in dry-run mode
  • Out of box running the command above, all it does is download the latest version of csf's zip to whatever folder you ran the command in.

• https://download.configserver.dev

  • Automatically fetches the latest version of CSF and downloads it to your machine. You don't need to put the csf.tgz at the end. You just need to visit the subdomain.

    wget https://download.configserver.dev -O csf.zip
    

  • This method also supports loading the URL in your browser and appending ?output=json to the URL, if you want a json response with the download URL such as:
    • https://download.configserver.dev?output=json

[josh-jday]

Curious, in the next point release will the csf -u command be restored?

[Aetherinox]

Curious, in the next point release will the csf -u command be restored?

Yes. csf -u will function just as it did before, without any changes. It'll just use the new URL.

The same goes for -c, --check and -uf (Forced update)

[Aetherinox]

Update servers have been switched over to the new domain:

• 83ebc15

Update server is now running

• https://download.configserver.dev/csf/version.txt
• https://download.configserver.dev/csf/changelog.txt

And the LFD abuse schemas are back up:

• https://download.configserver.dev/schema/abuse_login-attack_0.2.json

[Aetherinox]

I spent all day working on this specific set of features, and I just finished the documentation.

There are two ways to download CSF, and actually when I'm finished, there will be 3 ways.

1. The https://get.configserver.dev url
   • Read documentation at https://aetherinox.github.io/csf-firewall/advanced/services/get.configserver/
   • More-so for advanced users
2. The https://download.configserver.dev url
   • Read documentation at https://aetherinox.github.io/csf-firewall/advanced/services/download.configserver/
   • This is the exact same as the original developer's download.configserver.com; operates the same way, with added features
3. The https://update.configserver.dev (for automatic updates)

The docs I linked above will explain exactly what all features are included.

Just to re-iterate, if you want the same exact way that you could download updates with the original developer, then use https://download.configserver.dev

[cdbessig]

Wow, thanks so much!

[Aetherinox]

Sure thing. The docs are making progress a little slower than I like. Plus the initial setup, but we're getting there. One brick at a time.

[Aetherinox]

Alright, final update.

I've gone through and finished all the tasks to get the update server online.

The https://download.configserver.dev server acts just like the original. I have integrated blocklists with this repo's blocklist service (disabled by default of course), and I've ensured all the original end-points leading to the CSF's original domain has been fixed and working again.

I've tried to document every little thing I do within https://docs.configserver.dev as to answer every user's question, but I'm going to focus more on a release for now, and I'll complete the docs after. There should be all of the docs needed for users to get CSF installed, and learn about it's basic features. But docs have been eating my week up, and I'd really like to get into some final code before I roll out a release.

I created a summary page at https://docs.configserver.dev/services/ to outline the servers / services I've created this week. So that should at least give users an understanding of how this will operate.

I still need to go through the CI code and make some revisions, since I've opted to roll out releases as a .tgz instead of a .zip, as to stick with the original release convention and not throw anyone off. Plus not all distros have unzip. .tgz is universal.

[cdbessig]

Hey, so I tried editing our startup script to use this:

wget https://download.configserver.dev/csf.tgz

however, it's still a zip file that gets downloaded, not a tgz.

[root@me src]# tar -zxvf csf.tgz
tar: This does not look like a tar archive
tar: Skipping to next header
gzip: stdin has more than one entry--rest ignored
tar: Child returned status 2
tar: Error is not recoverable: exiting now

Just a heads up as others may be looking to simply replace the url.

I am going to edit my script to use a zip for now.

[cdbessig]

Also looks like the zip just extracts in the CWD instead of a folder called csf.

[Aetherinox]

Yeah, I haven't pushed out the first tgz release yet. Right now it's still serving a zip.

It gets the latest from our Github repo automatically. And on that page, I have zips uploaded.

Once I get going for the day, I'll upload a .tgz to the release page, and then prioritize tgz over zip. So it'll serve up the tgz first, and then only if a tgz is not available, switch to zip.

Created an issue from this post:

• Upload tgz; prioritize tgz over zip for download.configserver.dev #14

[Aetherinox]

Alright, pushed a .tgz and changed the code for download.configserver.dev

You can now do

wget download.configserver.dev/csf.tgz
tar -zxvf csf.tgz

or

wget download.configserver.dev/csf.zip
unzip csf.zip

Also changed the install docs so that tgz is the primary, zip is secondary.

[Aetherinox]

v15.01 is released. Fixes the update servers and gets things rolling.

[josh-jday]

So cool, just installed 15.01 and ran a CSF -u test update and everything is running great. I couldn't see the dark theme selector in whm but probably just me being blind 😎

[theking81]

Its in version 15.10 i think. @Aetherinox will let you know.

[josh-jday]

wget download.configserver.dev/csf.tgz

1. Extract the archive

tar -zxvf csf.tgz
cd csf

2. Run the installer/upgrade

sh install.sh

Worked great for me

[theking81]

Does the download.configserver.dev/csf.zip download has the latest v15.01 release?
An hour ago had the v15.00.

[Aetherinox]

Yes.

Also a little trick, if you want to see what version is being served, instead of just https://download.configserver.dev; use this url:

• https://download.configserver.dev/?output=json

It will give you the details about the download

{
  "timestamp": "2025-10-06T23:51:38.619Z",
  "message": "Downloading file csf.tgz",
  "code": 200,
  "download_url": "https://github.com/Aetherinox/csf-firewall/releases/download/15.01/csf-firewall-v15.01.tgz",
  "version": "15.01",
  "file_name_original": "csf-firewall-v15.01.tgz",
  "file_name": "csf.tgz",
  "took": "318ms",
  "took_ms": 318
}

You can also get the original filename with the version in it by going to:

• https://download.configserver.dev/?name=preserve

[josh-jday]

wget download.configserver.dev/csf.tgz
tar -zxvf csf.tgz
cd csf
sh install.sh

Worked great for me

[Aetherinox]

Yeah, everything should be back to how it was with the original developer. Same exact structure. I still offer the zip, but it's not the default. You just have to change the url to:

• https://download.configserver.dev/csf.zip

[Aetherinox]

Keeping things clean. This question seems to be answered. So I'll close this.

If you have any other questions, feel free to create a new one.