(The config file equivalent is CSF_INTEGRATION.catch_lfd_events). The main setting that defines how Imunif圓60 works along with CSF is 3-rd Party Integration switch. In this case, Imunif圓60 will block IPs only by mod_security events with high severity. We recommend to set LF_MODSEC variable to 0. This can lead to a large number of false positives. The number of events to block IP address is defined by LF_MODSEC variable in csf.conf. When mod_security is configured with SecRuleEngine On (blocking mode), CSF blocks IP addresses by mod_security events. Please manage IPs whitelisted in CSF using CSF user interface or config file'. To check that running CSF is detected, go to Imunif圓60 → Firewall tab → White List section and check if there is a warning message ' CSF is enabled.

Imunif圓60 will not block addresses from CSF Allow and Ignore Lists.

They can still be managed using CSF interface.

CSF Allow, Deny and Ignore Lists are not automatically imported from CSF.

Black List, Gray List, and White List can be managed in Imunif圓60 regardless of CSF.Imunif圓60 Blocked Ports, DoS Protection and SMTP Traffic Manager features are automatically disabled in this case.

Imunif圓60 automatically detects that CSF is running (you can enable it anytime). It is possible to use ConfigServer Security & Firewall (CSF) along with Imunif圓60.

Hosting Panels Firewall Rulesets Specific Settings & ModSecurity.

Comodo modsecurity cpanel