WP AutoShield®: One-Click WordPress Security from cPFence: Page 19 - Enhance Control Panel

WP AutoShield®: One-Click WordPress Security from cPFence

cPFence

As we’ve mentioned before, auto updates will not be turned off in cPFence anytime soon. Please stop bringing this up repeatedly, we respect your opinion, but trying to force your preferences on others isn’t productive. If this is a dealbreaker for you, feel free to use another product that better aligns with your needs. Simple as that.

For context, cPFence is not the only security software that doesn’t offer an auto-update toggle. These updates help us rapidly patch vulnerabilities and ensure compatibility, allowing our development to stay fast-paced. Without automatic updates, we'd be forced to slow down development significantly to manage support issues arising from outdated installations. Now, with a software that allows you to install it on 10 servers while paying only $5 a month, that would not be manageable at all.

Hope that clears things up, or should we expect more posts from you repeating the same complaint across every thread, even though you’ve already stopped using cPFence?!

gmakhs

cPFence I am not sure why you mention the price?
What price has to do with the quality of the software?

cPFence

gmakhs

Because we’re seeing a growing number of support tickets about issues unrelated to cPFence itself, while the overall income remains quite low. So we’re left with two options: either raise prices or reduce the support burden, and we chose the latter.

As for the quality of the software, you already know we’re actively working very very hard to improve it and doing our best. If our vision doesn’t align with what you’re looking for, or if you feel we’re not meeting your standards, that’s totally fine. Just move on. I’m sure you’ve got more important things to focus on.

8Dweb

@gmakhs I was wondering, does gmakhs stand for grousing, murmuring, annoying, kvetching, harping and sniping?

I am kidding... but only a little bit.... Dude, lighten up. If you don't like the product team (@Enhance and @cPFence) then we get it... time to settle that stuff down a bit.

Gilfoyle

8Dweb and @cPFence just don't respond to @gmakhs at all. Otherwise this will never end. Don't respond to any of his commends whether positive or negative. It is annoying when one person gives us all a headache. Just let him be please.

gmakhs

8Dweb indeed is time to change the tone

Kosta

For info when or if I go to a point where I have 20+ dedicated servers I will start paying Patch software company to install automatically everything for me.
I will be paying thousands a software company to have auto update so I to be compliant with ISO and much more directives… there is 100+ companies like this that charge to apply automation of patches and fixes….
No idea how someone can think of not having automation when having 100+ servers that needs to be top notch 100% a year.

What is Automated Patch Management?
Automating patch management successfully means all OS and third-party applications (e.g. Adobe, Chrome, and Slack) will be updated and protected against known vulnerabilities without manual intervention.

Cloud-based and globally available, automates OS and third-party patches and enforces device configuration to dramatically reduce the time, effort, and complexity associated with managing the fundamentals of cyber hygiene.

Effective third-party patching strategies give IT departments full visibility into all the software installed across their networks - including authorized and unauthorized applications - and automatically detect and deploy third-party software updates.

gmakhs

Kosta when you reach that level, you will have emplyes in place and a company that does that will feel like leechers on your revenue, so at this point you will start choosing where the budget goes very carefully, and also you will be able to have in-house team .

And then you have isos, confenditiality and other things that they will push you to in-house .

ivansalloum

Kosta May I ask how old you are?

gmakhs

ivansalloum I guess mid twenties 🙂 can be younger, in anycase i am proud of him starting something

Kosta

Yeah I will have in house team but still all be automated.
To be honest, I am thinking even for AI sysadministration as the way I see humans like you gmakhs having serious psychological problems lol
Ivan- don’t need

gmakhs

Kosta Nah my Therapist would have found any issue if there 🙂

AI sysadministration is any good now ? or you plan for it int he future?

Kosta

gmakhs if I am training the AI yes it be perfect. Obv your therapist sucks mate

gmakhs

Kosta I am not sure about training the AI, at this point but its good to stay open minded, about the therapist lets talk again when your business grows 😉

Aliysa_Enhance

A friendly reminder to keep the conversation on topic. Let’s steer this back please.

cPFence

Version 3.3.50 (12th April 2025)

Added

- Whitelist specific database entries from Database Scanning Module:

You can now exclude known-safe database entries from the daily malware scan.
Simply add the exact string to:
/opt/cpfence/user-config/cpfmrtp/whitelisted_db_entries.txt
Also available via the UI:
Admin UI → Edit Configuration Files → Manage Whitelisted DB Entries

Improved

- Smarter Owl WatchDog for services:

The Owl module now verifies that a service is truly down before sending alerts or attempting recovery. This prevents false positives when services are simply restarting.

- Enhanced server status tool:

The cpfence --server-status tool now displays even more useful system info, including:

CPU model, clock speed, and core count
Total installed RAM and disk size
Needed server reboots and pending security updates
Tip: Please include this output when opening support tickets—it helps speed up diagnostics.

Fixed

Improved WAF compatibility when specific server-side software packages are installed.

Steamon

Overall tried it on 2 servers with the spam autoshield and learning of spam with the new rspamd. It did not had problems with spamexperts internal mails go over rspamd and spamexperts external goes over spamexperts. Had a ticket at enhance open for nothing basically but its fine.

Now I get a certain spam e-mail I upload as spam then it still come into the mailbox with 2nd attempt with the ip address. Also tried blocking ips with the commands. This are not spamexperts users.

If I then scan the e-mail that I uploaded as spam before it will say graylist or add header but not reject.

Do I have to tweak something still? It did reduce spam by a bit after everything I did but some spam providers I am trying to block completely off but the ip block is not doing it 100%?

This are spam that spoof like a other company but has a different ip on the end thats the source and the one I block.

Its a big improvement how it was first but trying to learn it to stop everything.

Thanks for everything until now keep it going.

cPFence

Steamon

Appreciate the feedback! If some spam still sneaks through after training, it might help to tweak the score thresholds and use the Upload FUZZY option to train on known spam samples, most spammers make small changes in the email body, and fuzzy learning helps catch those sneaky variants.

Also, don’t forget to check the History tab, it’s super helpful for understanding why a message wasn’t flagged.

Blocking by IP won’t always work, especially if they rotate or use big services like Gmail. In those cases, blocking by subject or domain usually works better if there’s a clear pattern.

« Previous Page