Firewalld WHM Plugin

Vertahost Vertahost

• September 04, 2025 19:20

Hello,

I wanted to pass along, that we have released a basic Firewalld manager plugin for cPanel/WHM, along with a bash wrapper script. We started on this as a semi replacement for CSF due to the closure that everyone has most likely heard about.

For anyone interested, the code, and installation information for the plugin can be found here on our public GitHub:

https://github.com/vertahost/cpanel-firewalld-plugin

Everything has just been tested with the current WHM/cPanel version, 130.0.7 on a fresh install of Almalinux 9.5 with Firewalld version 1.3.4.

Please feel free to fork and make your own changes as needed, or add features back! Its currently released under the GPLv3 license.

Its not the most advanced thing at this time, but it can manage zones, rich rules, services, interfaces, and ports from within WHM. Firewalld needs to be setup at a basic level. cPanel and SSH should be added as services to your default zone, most likely "public". If you are setting this up on a fresh install of Alma9, cPanel will most likely automatically open the cPanel service for you.

Firewalld can become quite complex depending on your needs, but this interface should cover the basics.

 

Thank you!

• 

  pkiff

  • September 05, 2025 14:35

  Hey Vertahost Vertahost, this is awesome, if true! I've been manually configuring firewalld to replace csf/lfd (ConfigServer), and it would have been nice to have a GUI integrated into cPanel. 
  
  But I am a bit hesitant to use or recommend code from an unknown source. I notice that your GitHub account seems to have been created just a couple weeks ago and you don't have any other contributions. And the website for Vertahost doesn't have any contact info, and also seems to be have been created just in the past few weeks. 
  
  Can you maybe tell people who you are? And what your experience in web/cPanel/GitHub is?

  Thanks.

  Phil. 

  Philip Kiff 
  D4K Communications

  0
• 

  cPRex Jurassic Moderator

  • September 05, 2025 16:49

  I'm going to lock this thread, but I have a couple thoughts I want to share as to *why* I'm making that choice.

  The first, is what Phil said - we don't want to give the impression that just because something is shared on the Forum that's it's officially supported or endorsed by cPanel.

  The second, is that if I let this go, everyone will soon start posting their forks or alternatives and it's just going to get messy, and that isn't really helpful for anyone.

  1

Post is closed for comments.