# Installation

> Pyxsoft Firewall is a modern, high-performance replacement for CSF, designed for RHEL and cPanel servers. Fully compatible with nftables and iptables.

Source: https://www.pyxsoft.com/docs/firewall/pyxsoft-firewall
Updated: 2026-11-10

---

**Pyxsoft Firewall (PXF)** is a next-generation server firewall designed specifically for **RHEL-based systems** with **cPanel**.  
It is the **natural successor to ConfigServer CSF**, offering modern architecture, full nftables support, and backward compatibility with iptables.  
PXF provides a robust command-line interface, deep integration with WHM, and automatic handling of security events without compromising performance.

Built from the ground up for **security, simplicity, and speed**, Pyxsoft Firewall intelligently manages system rules and integrates seamlessly with cPanel environments, making it ideal for web hosting providers and system administrators who require a reliable, actively maintained firewall.

---

## Requirements

> **Warning**
>
> Remove or uninstall any previous firewall before installing Pyxsoft Firewall.

1. RHEL 7/8/9/10 with cPanel installed. (CloudLinux/AlmaLinux/RockyLinux)
2. Stop and disable firewalld if it is running. (see below)

---

## Manual Installation Steps

1. **Remove any previous firewall (such as CSF).**

   ```bash
   # Stop and uninstall CSF
   csf -x
   cd /etc/csf
   sh uninstall.sh
   
   # Stop and disable firewalld
   systemctl stop firewalld
   systemctl disable firewalld
   ```
   
2. **Install the Pyxsoft repository:**
   ```bash
   yum install https://pyxsoft.com/extra/repo-latest.rpm
    ```

3. **Install ipset (RHEL 7/8/9/10 only):**
    ```bash
    yum install ipset
    ```

4. **Install Pyxsoft Firewall:**

   ```bash
   yum install pxf-cpanel
   ```

---

## Important Notes

Pyxsoft Firewall must be the **only active firewall** on your system.
It takes full control over **nftables** and **iptables**, ensuring consistent rule management and preventing conflicts with other firewall services.

---

## Key Advantages

* **Full nftables support** with iptables compatibility mode.
* **Lightweight and fast**, optimized for high-performance hosting servers.
* **Seamless WHM integration** with intuitive management.
* **Real-time protection and automatic security rules.**
* Developed and maintained by **Pyxsoft**, creators of Pyxsoft Antimalware & WAF.
