Articles
Lion Server Firewall (LSF) v3.2.0 is the host firewall on Lionhost WHM/cPanel servers (and...
Where do I find LSF in WHMLog in to WHM as root. Plugins → Lion Server Firewall (or search for Lion / LSF). Tabs:...
Site / cPanel / mail down only from my networkIf the site, cPanel or mail is down only from your network but works from mobile data, your...
How to whitelist or blacklist an IP in LSFWHM → Lion Server Firewall → Overview or Firewall → IP / CIDR. Allow — permanent trust...
Can I run LSF and CSF together?No. Do not run LSF and CSF together. Both write netfilter rules; the combination causes conflicts...
LSF TESTING and NORMAL modeTESTING=1 (default) — rules auto-flush after 300 seconds if something goes wrong. NORMAL — rules...
Locked out of the server by LSFTESTING mode: wait up to 5 minutes for the auto-flush. Lionhost KVM / VNC / IPMI as root: lsf...
Which ports does Lion Server Firewall openDefault TCP_IN: 20, 21, 22, 25, 26, 53, 80, 110, 143, 443, 465, 587, 993, 995, 2082, 2083, 2086,...
LFD and PSAD — brute force and port scansLFD watches SSH, FTP, mail, Exim, cPanel and ModSecurity failures. Default: 5 hits in 300 seconds...
LSF WAF false positiveLSF does not replace WHM → ModSecurity Vendors (OWASP CRS / Atomicorp). It loads a supplementary...
GeoIP country blocking in LSFCC_DENY="CN,RU,KP" CC_ALLOW="GR,CY,DE" CC_DENY drops all inbound from those countries. CC_ALLOW...
Cloudflare and BunnyCDN origin lockOrigin lock accepts HTTP/HTTPS only from official CDN ranges. Direct hits to the server IP on...
DDoS protection on Lion Server FirewallLSF is host L3/L4 protection, not network scrubbing and not a replacement for Cloudflare....
LSF health checkWHM → Lion Server Firewall → Health, or Overview → Run diagnostic, or lsf --check. It tests the...
Lion Server Firewall CLI commandsRun as root. lsf -e / lsf -x # enable / disable lsf -s / lsf -l # status / rules...
[STAFF] LSF ticket replySTAFF ONLY — do not publish. Ask for the customer public IP. lsf --search IP or Simulator. lsf...
