CSF problems after EasyApache 4 upgrade

Upgrading to EasyApache4 may cause problems with the CSF firewall. This is because the Apache error logs are in a different place and you need to tell that to CSF.

If you upgrade from EasyApache3 to EasyApache4 and you run CSF (ConfigServer Firewall), the firewall may not run correctly because the Apache log files will have moved on your server.

You’re going to need to make some changes to your CSF configuration because the firewall will not be able to find these newly located logs and CSF will not be able to monitor your system effectively.

As far as I can see, these are the changes you need to make:

  1. Log in to a shell as root,
  2. go to the /etc/csf directory,
  3. edit the csf.conf file and scroll down towards the end. You’re looking for the HTACCESS_LOG and MODSEC_LOG directives. These both need to be changed to point to /var/log/apache2/error_log,
  4. save the csf.conf file,
  5. edit the csf.syslogs file and go to the Apache section. Change anything with a directory that begins /var/log/httpd to /var/log/apache2,
  6. save the csf.syslogs file,
  7. restart CSF by typing csf -r at the command line.

This should get CSF running correctly again, which is obviously important because it’s your firewall.