Pyxsoft is compatible with CSF/LFD however the following considerations need to be taken into account:
- CSF removes all iptables/nft rules every time it is restarted. The pxShield module (Pyxsoft WAF) requires certain rules in the nat table. We have included a script that is run every time CSF reboots, which aims to re-create the NAT rules for pxShield to work properly. The script can be found in /usr/local/csf/bin/csfpost.sh. The original file is located in /opt/pxshield/scripts/csfpost.sh.
- IMPORTANT: It is possible that under certain circumstances CSF/LFD blocks the web server’s own IP address, which prevents any connection via http to the server. To avoid this problem it is necessary to add the IP address of the server to the /etc/csf/csf.ignore file. The Pyxsoft installation script for cPanel automatically performs this task, but if CSF is installed after Pyxsoft, it must be done manually.