The Firewall for
Web & Self-Hosting
A Stateful Packet Inspection (SPI) firewall, Login/Intrusion Detection
and Security application for Linux servers.Debian and RHEL!
iptables firewall
A Stateful Packet Inspection (SPI) iptables firewall that track the state of network connections, allowing only legitimate traffic to pass through.
intrusion detection
A daemon that monitors login failures for services like SSH, cPanel, FTP, IMAP, SMTP, and web apps. It also supports custom log parsing with regex.
security tools
A suite of security tools: block lists, mod_security log reporting, exploit checks, system alerts.. and more
What is Sentinel?
fork of ConfigServer Firewall & Security
⚡ The sudden shutdown of Configserver in 2025 has left a huge gap in our ecosystem. For years, ConfigServer Firewall (CSF) has been the backbone of server security for hosting providers and control panels — stable, feature-rich, and trusted by sysadmins everywhere.
Luckily, Way to the Web Limited released the CSF script under the GPL license. Soon after, a group of us SysAdmins have started the Sentinel project — a fork of CSF that is actively maintained, community-driven, and fully compatible as a drop-in replacement on existing servers.
CSF
Advanced Firewall Protection
Provides robust iptables-based filtering to secure servers from unauthorized access.
Granular Access Control
Manage inbound and outbound traffic with precise port and IP restrictions.
Brute-Force Defense
Blocks repeated login attempts and suspicious activity automatically.
LFD
Real-Time Intrusion Detection
Monitors system logs for failed login attempts and malicious behavior.
Automated IP Blocking
Instantly bans attackers showing suspicious login patterns.
Alert & Notification System
Sends security alerts to keep administrators informed.
UI
User-Friendly Dashboard
Simplifies firewall and LFD management with an intuitive web UI.
Quick Rule Management
Add, edit, or remove firewall rules without command-line complexity.
Live Monitoring Tools
View active connections, blocks, and logs in real-time.
Why use Sentinel?
Security. Control. Automation. Ease of Management.
Sentinel firewall (CSF and LFD) offers advanced firewall protection, real-time intrusion detection, and an intuitive web interface—giving administrators powerful tools to safeguard servers while simplifying day-to-day management.
How-to guides & articles
Our Blog
Discover expert tips, best practices, and deep dives into Linux Security—helping you strengthen security, optimize performance, and stay ahead of server threats.
Get Involved
Join the community
Star us on Github, write blog post about Sentinel, drop in on our Discord channel. There are plenty of ways to get connected with the wider community for support, insight, use-cases and expertise.
Get Started
Start using Sentinel Firewall
Upgrade from CSF
Upgrade from CSF to Sentinel on your existing server with ConfigServer Firewall
Upgrade from CSF