{"id":39759,"date":"2022-01-10T12:30:00","date_gmt":"2022-01-10T18:30:00","guid":{"rendered":"https:\/\/www.rosehosting.com\/blog\/?p=39759"},"modified":"2025-12-10T06:02:13","modified_gmt":"2025-12-10T12:02:13","slug":"how-to-install-config-server-firewall-csf-on-debian-11","status":"publish","type":"post","link":"https:\/\/www.rosehosting.com\/blog\/how-to-install-config-server-firewall-csf-on-debian-11\/","title":{"rendered":"How to Install Config Server Firewall (CSF) on Debian 11"},"content":{"rendered":"<div id=\"bsf_rt_marker\"><\/div>\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"742\" height=\"372\" src=\"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2021\/12\/how-to-install-config-server-firewall-on-debian-11.jpg\" alt=\"how to install config server firewall on debian 11\" class=\"wp-image-40159\" srcset=\"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2021\/12\/how-to-install-config-server-firewall-on-debian-11.jpg 742w, https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2021\/12\/how-to-install-config-server-firewall-on-debian-11-300x150.jpg 300w, https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2021\/12\/how-to-install-config-server-firewall-on-debian-11-150x75.jpg 150w\" sizes=\"(max-width: 742px) 100vw, 742px\" \/><\/figure>\n\n\n\n<p>Config Server Firewall, also known as CSF, is a free firewall software used on Linux distributions. Except for the basic firewall functionality, it also offers IDS \u201cintrusion detection system\u201d as well as login and flood detection and other security features which help to keep your server secure.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignright size-full is-resized\"><img decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2021\/12\/installing-config-server-firewall-on-debian-11.png\" alt=\"installing config server firewall on debian 11\" class=\"wp-image-40027\" style=\"width:249px;height:139px\" srcset=\"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2021\/12\/installing-config-server-firewall-on-debian-11.png 1024w, https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2021\/12\/installing-config-server-firewall-on-debian-11-300x169.png 300w, https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2021\/12\/installing-config-server-firewall-on-debian-11-150x84.png 150w, https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2021\/12\/installing-config-server-firewall-on-debian-11-768x432.png 768w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n<\/div>\n\n\n<p>CSF offers integration with popular web Control Panels such as cPanel, Directadmin, and Webmin. The LFD ( Login Failure Daemon ) also supports the following applications for monitoring login failures: openSSH, vsftpd, proftpd, pure-ftpd, Mod_security failures, and many others. In this tutorial, we will show you how to install Config Server Firewall (CSF) on Debian 11.<\/p>\n\n\n\n<!--more-->\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_82_2 counter-hierarchy ez-toc-counter ez-toc-transparent ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-69cc0b6108457\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"ez-toc-cssicon\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-69cc0b6108457\"  aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.rosehosting.com\/blog\/how-to-install-config-server-firewall-csf-on-debian-11\/#Prerequisites\" >Prerequisites<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.rosehosting.com\/blog\/how-to-install-config-server-firewall-csf-on-debian-11\/#Step-1-Installing-dependencies\" >Step 1. Installing dependencies<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.rosehosting.com\/blog\/how-to-install-config-server-firewall-csf-on-debian-11\/#Step-2-Download-and-install-CSF\" >Step 2. Download and install CSF<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.rosehosting.com\/blog\/how-to-install-config-server-firewall-csf-on-debian-11\/#Step-3-Start-and-enable-CSF\" >Step 3. Start and enable CSF<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.rosehosting.com\/blog\/how-to-install-config-server-firewall-csf-on-debian-11\/#Step-4-Configuration-and-CSF-management\" >Step 4. Configuration and CSF management<\/a><\/li><\/ul><\/nav><\/div>\n<h2 class=\"wp-block-heading\" id=\"h-prerequisites\"><span class=\"ez-toc-section\" id=\"Prerequisites\"><\/span>Prerequisites<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Debian 11 VPS<\/li>\n\n\n\n<li>SSH root access or a regular system user with sudo privileges<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-step-1-installing-dependencies\"><span class=\"ez-toc-section\" id=\"Step-1-Installing-dependencies\"><\/span>Step 1. Installing dependencies<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Before starting with the ConfigServer Firewall installation, you should update your system packages<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt-get update<\/code><\/pre>\n\n\n\n<p>After the packages are updated, you need to install the required dependencies before continuing with the installation.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt install libio-socket-inet6-perl libsocket6-perl sendmail dnsutils unzip libio-socket-ssl-perl libcrypt-ssleay-perl git perl iptables libnet-libidn-perl<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-step-2-download-and-install-csf\"><span class=\"ez-toc-section\" id=\"Step-2-Download-and-install-CSF\"><\/span>Step 2. Download and install CSF<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Now you can proceed with the installation after installing all the necessary prerequisites.<br>The Config Server Firewall (CSF) package is not present in the Debian 11 repository, that\u2019s why you will need to download it from their official site.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>wget https:\/\/github.com\/waytotheweb\/scripts\/raw\/refs\/heads\/main\/csf.tgz<\/code><\/pre>\n\n\n\n<p>Now go ahead and extract the downloaded package.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo tar -xvzf csf.tgz<\/code><\/pre>\n\n\n\n<p>You can now navigate to the CSF directory and start the ConfigServer Firewall installation.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cd csf\nsh install.sh<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-step-3-start-and-enable-csf\"><span class=\"ez-toc-section\" id=\"Step-3-Start-and-enable-CSF\"><\/span>Step 3. Start and enable CSF<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Once the installation has finished, you can start CSF with the following command.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo systemctl start csf<\/code><\/pre>\n\n\n\n<p>To check if everything works fine and if all the iptables modules are loaded, you can run the following command.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>perl \/usr\/local\/csf\/bin\/csftest.pl<\/code><\/pre>\n\n\n\n<p>If the installation and start-up of CSF were successful you should receive similar output.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Testing ip_tables\/iptable_filter...OK\nTesting ipt_LOG...OK\nTesting ipt_multiport\/xt_multiport...OK\nTesting ipt_REJECT...OK\nTesting ipt_state\/xt_state...OK\nTesting ipt_limit\/xt_limit...OK\nTesting ipt_recent...OK\nTesting xt_connlimit...OK\nTesting ipt_owner\/xt_owner...OK\nTesting iptable_nat\/ipt_REDIRECT...OK\nTesting iptable_nat\/ipt_DNAT...OK\n\nRESULT: csf should function on this server<\/code><\/pre>\n\n\n\n<p>To start CSF on boot, you should run the following command:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo systemctl enable csf<\/code><\/pre>\n\n\n\n<p>You can now check if CSF is active by running the command:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo systemctl status csf<\/code><\/pre>\n\n\n\n<p>When you install CSF, the service is set in Testing mode by default, to disable the Testing mode and enable the CSF service you should change the value <strong>TESTING = 1 <\/strong>to <strong>TESTING = 0 <\/strong>in the <strong>\/etc\/csf\/csf.conf <\/strong>file.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-step-4-configuration-and-csf-management\"><span class=\"ez-toc-section\" id=\"Step-4-Configuration-and-CSF-management\"><\/span>Step 4. Configuration and CSF management<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>After editing the \/etc\/csf\/csf.conf file you can apply the changes by running<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>csf -r <\/code><\/pre>\n\n\n\n<p>You can edit the csf.conf file to close or open TCP and UDP ports, for example:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>TCP_IN: 22,53\nTCP_OUT: 22,53,80,113,443\nUPD_IN: 53\nUPD_OUT: 53,113,123<\/code><\/pre>\n\n\n\n<p>These are the most common ports used on a web server, but if we want to add MySQL remote database access we can add port 3306 to TCP_IN and TCP_OUT like this:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>TCP_IN: 22,53,3306\nTCP_OUT: 22,53,80,113,443,3306\nUPD_IN: 53\nUPD_OUT: 53,113,123<\/code><\/pre>\n\n\n\n<p>To block certain IP addresses or IP subnets you can add the IPs in the <strong>\/etc\/csf\/csf.deny <\/strong>file in one line per IP address or per subnet.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>10.20.30.40.50\n15.25.35.45.50\/16<\/code><\/pre>\n\n\n\n<p>The same goes for allowed IP addresses in <strong>\/etc\/csf\/csf.allow, <\/strong>the IP addresses found in this file take priority over the ones in the csf.blok file. You can have the same IP in the csf.block file and csf.allow file and the IP address will be still allowed.<\/p>\n\n\n\n<p>Besides the configuration files, you can use the CSF command along with flags to allow\/deny, check IP or track IP addresses, and so on, you can check the whole list of options by running <strong>csf \u2013-help<\/strong>.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>csf -a 1.2.3.4 # allow IP address\ncsf -d 4.5.6.7 # deny IP address\ncsf -g 6.7.8.9 # check whether IP address is blocked or not\ncsf -l        # list all the iptables rules.<\/code><\/pre>\n\n\n\n<p>That\u2019s it. You have successfully installed ConfigServer Firewall (CSF) on your Debian 11 VPS. If you are one of our web hosting customers and use our optimized <a href=\"https:\/\/www.rosehosting.com\/linux-vps-hosting\/\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>Linux Hosting<\/strong><\/a> plans, you don\u2019t have to install ConfigServer Firewall (CSF) on your Debian 11, our expert Linux admins will set up ConfigServer Firewall (CSF) on your VPS, for you. They are available 24\u00d77 and will take care of your request immediately.<\/p>\n\n\n\n<p>PS. If you liked this post, on how to install ConfigServer Firewall (CSF) on your Debian 11, please share it with your friends on the social networks using the buttons on the left or simply leave a reply below. Thanks.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Config Server Firewall, also known as CSF, is a free firewall software used on Linux distributions. Except for the basic &#8230; <\/p>\n<p class=\"read-more-container\"><a title=\"How to Install Config Server Firewall (CSF) on Debian 11\" class=\"read-more button\" href=\"https:\/\/www.rosehosting.com\/blog\/how-to-install-config-server-firewall-csf-on-debian-11\/#more-39759\" aria-label=\"Read more about How to Install Config Server Firewall (CSF) on Debian 11\">Read More<\/a><\/p>\n","protected":false},"author":4,"featured_media":40159,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1700,13],"tags":[1966,1783,1962,1603],"class_list":["post-39759","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-debian","category-tutorials","tag-config-server-firewall","tag-csf","tag-debian-11","tag-how-to-install","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-33"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.2 (Yoast SEO v27.3) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>How to Install Config Server Firewall (CSF) on Debian 11 | RoseHosting<\/title>\n<meta name=\"description\" content=\"Learn how to set up and install a config server firewall (CSF) on a Debian 11 OS using our detailed guide for beginners and experts.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.rosehosting.com\/blog\/how-to-install-config-server-firewall-csf-on-debian-11\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Install Config Server Firewall (CSF) on Debian 11 | RoseHosting\" \/>\n<meta property=\"og:description\" content=\"Learn how to set up and install a config server firewall (CSF) on a Debian 11 OS using our detailed guide for beginners and experts.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.rosehosting.com\/blog\/how-to-install-config-server-firewall-csf-on-debian-11\/\" \/>\n<meta property=\"og:site_name\" content=\"RoseHosting\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/RoseHosting\" \/>\n<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/rosehosting.helpdesk\" \/>\n<meta property=\"article:published_time\" content=\"2022-01-10T18:30:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-12-10T12:02:13+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2021\/12\/how-to-install-config-server-firewall-on-debian-11.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"742\" \/>\n\t<meta property=\"og:image:height\" content=\"372\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jeff Wilson\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"How to Install Config Server Firewall (CSF) on Debian 11 | RoseHosting\" \/>\n<meta name=\"twitter:description\" content=\"Learn how to set up and install a config server firewall (CSF) on a Debian 11 OS using our detailed guide for beginners and experts.\" \/>\n<meta name=\"twitter:creator\" content=\"@rosehosting\" \/>\n<meta name=\"twitter:site\" content=\"@rosehosting\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jeff Wilson\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/how-to-install-config-server-firewall-csf-on-debian-11\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/how-to-install-config-server-firewall-csf-on-debian-11\\\/\"},\"author\":{\"name\":\"Jeff Wilson\",\"@id\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/#\\\/schema\\\/person\\\/7ce77a842fa6a9a7f8efa186f2353713\"},\"headline\":\"How to Install Config Server Firewall (CSF) on Debian 11\",\"datePublished\":\"2022-01-10T18:30:00+00:00\",\"dateModified\":\"2025-12-10T12:02:13+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/how-to-install-config-server-firewall-csf-on-debian-11\\\/\"},\"wordCount\":631,\"commentCount\":5,\"publisher\":{\"@id\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/how-to-install-config-server-firewall-csf-on-debian-11\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/12\\\/how-to-install-config-server-firewall-on-debian-11.jpg\",\"keywords\":[\"config server firewall\",\"csf\",\"debian 11\",\"how to install\"],\"articleSection\":[\"Debian\",\"Tutorials\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/how-to-install-config-server-firewall-csf-on-debian-11\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/how-to-install-config-server-firewall-csf-on-debian-11\\\/\",\"url\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/how-to-install-config-server-firewall-csf-on-debian-11\\\/\",\"name\":\"How to Install Config Server Firewall (CSF) on Debian 11 | RoseHosting\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/how-to-install-config-server-firewall-csf-on-debian-11\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/how-to-install-config-server-firewall-csf-on-debian-11\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/12\\\/how-to-install-config-server-firewall-on-debian-11.jpg\",\"datePublished\":\"2022-01-10T18:30:00+00:00\",\"dateModified\":\"2025-12-10T12:02:13+00:00\",\"description\":\"Learn how to set up and install a config server firewall (CSF) on a Debian 11 OS using our detailed guide for beginners and experts.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/how-to-install-config-server-firewall-csf-on-debian-11\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/how-to-install-config-server-firewall-csf-on-debian-11\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/how-to-install-config-server-firewall-csf-on-debian-11\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/12\\\/how-to-install-config-server-firewall-on-debian-11.jpg\",\"contentUrl\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/12\\\/how-to-install-config-server-firewall-on-debian-11.jpg\",\"width\":742,\"height\":372,\"caption\":\"how to install config server firewall on debian 11\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/how-to-install-config-server-firewall-csf-on-debian-11\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Install Config Server Firewall (CSF) on Debian 11\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/\",\"name\":\"RoseHosting.com\",\"description\":\"Premium Linux Tutorials Since 2001\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/#organization\",\"name\":\"RoseHosting\",\"url\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/03\\\/android-chrome-192x192-1.png\",\"contentUrl\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/03\\\/android-chrome-192x192-1.png\",\"width\":192,\"height\":192,\"caption\":\"RoseHosting\"},\"image\":{\"@id\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/RoseHosting\",\"https:\\\/\\\/x.com\\\/rosehosting\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/rosehosting\\\/\"],\"description\":\"RoseHosting is a leading Linux hosting provider, serving thousands of clients world-wide since 2001.\",\"email\":\"info@rosehosting.com\",\"telephone\":\"(314) 275-0414\",\"legalName\":\"Rose Web Services LLC\",\"foundingDate\":\"2001-04-02\",\"numberOfEmployees\":{\"@type\":\"QuantitativeValue\",\"minValue\":\"11\",\"maxValue\":\"50\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/#\\\/schema\\\/person\\\/7ce77a842fa6a9a7f8efa186f2353713\",\"name\":\"Jeff Wilson\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0985fed6af04cc60703d2ecf27c65dfa373e0ca00eb21c0b03477e099ea3f99f?s=96&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0985fed6af04cc60703d2ecf27c65dfa373e0ca00eb21c0b03477e099ea3f99f?s=96&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0985fed6af04cc60703d2ecf27c65dfa373e0ca00eb21c0b03477e099ea3f99f?s=96&r=g\",\"caption\":\"Jeff Wilson\"},\"description\":\"An experienced Linux veteran with many years of experience. Helping other Linux admins with frequent Linux and business-related blog posts on the RoseHosting blog. Techie by choice. Loving nature and travel. Happily married and father of two lovely children.\",\"sameAs\":[\"https:\\\/\\\/www.rosehosting.com\",\"https:\\\/\\\/www.facebook.com\\\/rosehosting.helpdesk\"],\"url\":\"https:\\\/\\\/www.rosehosting.com\\\/blog\\\/author\\\/jwilson\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"How to Install Config Server Firewall (CSF) on Debian 11 | RoseHosting","description":"Learn how to set up and install a config server firewall (CSF) on a Debian 11 OS using our detailed guide for beginners and experts.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.rosehosting.com\/blog\/how-to-install-config-server-firewall-csf-on-debian-11\/","og_locale":"en_US","og_type":"article","og_title":"How to Install Config Server Firewall (CSF) on Debian 11 | RoseHosting","og_description":"Learn how to set up and install a config server firewall (CSF) on a Debian 11 OS using our detailed guide for beginners and experts.","og_url":"https:\/\/www.rosehosting.com\/blog\/how-to-install-config-server-firewall-csf-on-debian-11\/","og_site_name":"RoseHosting","article_publisher":"https:\/\/www.facebook.com\/RoseHosting","article_author":"https:\/\/www.facebook.com\/rosehosting.helpdesk","article_published_time":"2022-01-10T18:30:00+00:00","article_modified_time":"2025-12-10T12:02:13+00:00","og_image":[{"width":742,"height":372,"url":"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2021\/12\/how-to-install-config-server-firewall-on-debian-11.jpg","type":"image\/jpeg"}],"author":"Jeff Wilson","twitter_card":"summary_large_image","twitter_title":"How to Install Config Server Firewall (CSF) on Debian 11 | RoseHosting","twitter_description":"Learn how to set up and install a config server firewall (CSF) on a Debian 11 OS using our detailed guide for beginners and experts.","twitter_creator":"@rosehosting","twitter_site":"@rosehosting","twitter_misc":{"Written by":"Jeff Wilson","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.rosehosting.com\/blog\/how-to-install-config-server-firewall-csf-on-debian-11\/#article","isPartOf":{"@id":"https:\/\/www.rosehosting.com\/blog\/how-to-install-config-server-firewall-csf-on-debian-11\/"},"author":{"name":"Jeff Wilson","@id":"https:\/\/www.rosehosting.com\/blog\/#\/schema\/person\/7ce77a842fa6a9a7f8efa186f2353713"},"headline":"How to Install Config Server Firewall (CSF) on Debian 11","datePublished":"2022-01-10T18:30:00+00:00","dateModified":"2025-12-10T12:02:13+00:00","mainEntityOfPage":{"@id":"https:\/\/www.rosehosting.com\/blog\/how-to-install-config-server-firewall-csf-on-debian-11\/"},"wordCount":631,"commentCount":5,"publisher":{"@id":"https:\/\/www.rosehosting.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.rosehosting.com\/blog\/how-to-install-config-server-firewall-csf-on-debian-11\/#primaryimage"},"thumbnailUrl":"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2021\/12\/how-to-install-config-server-firewall-on-debian-11.jpg","keywords":["config server firewall","csf","debian 11","how to install"],"articleSection":["Debian","Tutorials"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.rosehosting.com\/blog\/how-to-install-config-server-firewall-csf-on-debian-11\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.rosehosting.com\/blog\/how-to-install-config-server-firewall-csf-on-debian-11\/","url":"https:\/\/www.rosehosting.com\/blog\/how-to-install-config-server-firewall-csf-on-debian-11\/","name":"How to Install Config Server Firewall (CSF) on Debian 11 | RoseHosting","isPartOf":{"@id":"https:\/\/www.rosehosting.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.rosehosting.com\/blog\/how-to-install-config-server-firewall-csf-on-debian-11\/#primaryimage"},"image":{"@id":"https:\/\/www.rosehosting.com\/blog\/how-to-install-config-server-firewall-csf-on-debian-11\/#primaryimage"},"thumbnailUrl":"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2021\/12\/how-to-install-config-server-firewall-on-debian-11.jpg","datePublished":"2022-01-10T18:30:00+00:00","dateModified":"2025-12-10T12:02:13+00:00","description":"Learn how to set up and install a config server firewall (CSF) on a Debian 11 OS using our detailed guide for beginners and experts.","breadcrumb":{"@id":"https:\/\/www.rosehosting.com\/blog\/how-to-install-config-server-firewall-csf-on-debian-11\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.rosehosting.com\/blog\/how-to-install-config-server-firewall-csf-on-debian-11\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.rosehosting.com\/blog\/how-to-install-config-server-firewall-csf-on-debian-11\/#primaryimage","url":"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2021\/12\/how-to-install-config-server-firewall-on-debian-11.jpg","contentUrl":"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2021\/12\/how-to-install-config-server-firewall-on-debian-11.jpg","width":742,"height":372,"caption":"how to install config server firewall on debian 11"},{"@type":"BreadcrumbList","@id":"https:\/\/www.rosehosting.com\/blog\/how-to-install-config-server-firewall-csf-on-debian-11\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.rosehosting.com\/blog\/"},{"@type":"ListItem","position":2,"name":"How to Install Config Server Firewall (CSF) on Debian 11"}]},{"@type":"WebSite","@id":"https:\/\/www.rosehosting.com\/blog\/#website","url":"https:\/\/www.rosehosting.com\/blog\/","name":"RoseHosting.com","description":"Premium Linux Tutorials Since 2001","publisher":{"@id":"https:\/\/www.rosehosting.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.rosehosting.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.rosehosting.com\/blog\/#organization","name":"RoseHosting","url":"https:\/\/www.rosehosting.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.rosehosting.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2022\/03\/android-chrome-192x192-1.png","contentUrl":"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2022\/03\/android-chrome-192x192-1.png","width":192,"height":192,"caption":"RoseHosting"},"image":{"@id":"https:\/\/www.rosehosting.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/RoseHosting","https:\/\/x.com\/rosehosting","https:\/\/www.linkedin.com\/in\/rosehosting\/"],"description":"RoseHosting is a leading Linux hosting provider, serving thousands of clients world-wide since 2001.","email":"info@rosehosting.com","telephone":"(314) 275-0414","legalName":"Rose Web Services LLC","foundingDate":"2001-04-02","numberOfEmployees":{"@type":"QuantitativeValue","minValue":"11","maxValue":"50"}},{"@type":"Person","@id":"https:\/\/www.rosehosting.com\/blog\/#\/schema\/person\/7ce77a842fa6a9a7f8efa186f2353713","name":"Jeff Wilson","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/0985fed6af04cc60703d2ecf27c65dfa373e0ca00eb21c0b03477e099ea3f99f?s=96&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/0985fed6af04cc60703d2ecf27c65dfa373e0ca00eb21c0b03477e099ea3f99f?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/0985fed6af04cc60703d2ecf27c65dfa373e0ca00eb21c0b03477e099ea3f99f?s=96&r=g","caption":"Jeff Wilson"},"description":"An experienced Linux veteran with many years of experience. Helping other Linux admins with frequent Linux and business-related blog posts on the RoseHosting blog. Techie by choice. Loving nature and travel. Happily married and father of two lovely children.","sameAs":["https:\/\/www.rosehosting.com","https:\/\/www.facebook.com\/rosehosting.helpdesk"],"url":"https:\/\/www.rosehosting.com\/blog\/author\/jwilson\/"}]}},"_links":{"self":[{"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/posts\/39759","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/comments?post=39759"}],"version-history":[{"count":7,"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/posts\/39759\/revisions"}],"predecessor-version":[{"id":51383,"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/posts\/39759\/revisions\/51383"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/media\/40159"}],"wp:attachment":[{"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/media?parent=39759"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/categories?post=39759"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/tags?post=39759"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}