Skip to main content

Pyxsoft Firewall

Pyxsoft Firewall (PXF) is a next-generation server firewall designed specifically for RHEL-based systems with cPanel.
It is the natural successor to ConfigServer CSF, offering modern architecture, full nftables support, and backward compatibility with iptables.
PXF provides a robust command-line interface, deep integration with WHM, and automatic handling of security events without compromising performance.

Built from the ground up for security, simplicity, and speed, Pyxsoft Firewall intelligently manages system rules and integrates seamlessly with cPanel environments, making it ideal for web hosting providers and system administrators who require a reliable, actively maintained firewall.


Requirements

warning

Remove or uninstall any previous firewall before installing Pyxsoft Firewall.

  1. RHEL 7/8/9 with cPanel installed. (CloudLinux/AlmaLinux/RockyLinux)
  2. Stop and disable firewalld if it is running. (see below)

Manual Installation Steps

  1. Remove any previous firewall (such as CSF).

    # Stop and uninstall CSF
    csf -x
    cd /etc/csf
    sh uninstall.sh

    # Stop and disable firewalld
    systemctl stop firewalld
    systemctl disable firewalld
  2. Install the Pyxsoft repository:

    yum install https://pyxsoft.com/extra/repo-latest.rpm
  3. Install ipset (RHEL 7/8/9 only):

    yum install ipset
  4. Install Pyxsoft Firewall:

    yum install pxf-cpanel

Important Notes

Pyxsoft Firewall must be the only active firewall on your system. It takes full control over nftables and iptables, ensuring consistent rule management and preventing conflicts with other firewall services.


Key Advantages

  • Full nftables support with iptables compatibility mode.
  • Lightweight and fast, optimized for high-performance hosting servers.
  • Seamless WHM integration with intuitive management.
  • Real-time protection and automatic security rules.
  • Developed and maintained by Pyxsoft, creators of Pyxsoft Antimalware & WAF.