The cPFence Central Dashboard is Here – One Panel. Full Power.: Page 2 - Enhance Control Panel

The cPFence Central Dashboard is Here – One Panel. Full Power.

standtech

compatible with only OLS or nginx too ?

cPFence

Yes, only OLS/LS at the moment but Nginx is on our roadmap. Our development is moving pretty fast, though I can’t give an exact ETA just yet.

Edit: This applies to the WAF only. All other modules are fully compatible with all web servers.

webnestify

cPFence How well secured the webui? On which servers is it running. What would happened if someone get access to webui servers?

cPFence

webnestify

It runs only on the main control panel server over port 9095. That port is fully closed by default and only opened for specific allowed IPs. The WebUI is protected by a strong password plus two layers of security: UFW and built-in IP restriction.

To access it, you need to run:
cpfence --add-webui-ip <your-ip-address>
This command whitelists your IP in both UFW and the WebUI’s built-in protection.

So, for someone to gain access, they'd first need root access to reset the password and have their IP manually whitelisted from root. Even after logging in, only specific allowed actions can be executed , any attempt to tamper with those won’t be allowed.

Kosta

cPFence maybe be good to have google authentication as well? Just another layer of security..? Otp

webnestify

cPFence So it is running locally on main enhance panel server?

webnestify

cPFence Also I would really love to see SSO (OAuth, Saml, etc) so I can leave auth to Authentik. That would be great

cPFence

Kosta

Thanks for the suggestion. We may add this in the future , in the meantime, IP restriction is a solid, bulletproof solution.

8Dweb

@cPFence Great Job. We just enabled it, started going through things, and it works very well. Some UI issues for our team, but those are so minor, I do not want to focus on them here.

Being able to live monitor certain things is awesome.

We are very happy with the progress of your set of tools.

cPFence

8Dweb

btraill

You’re welcome , glad to hear you’re finding it useful!

webnestify
Yes, on the main CP only. Thanks for the suggestion , we might consider adding SSO in the future.

btraill

Pleasantly surprised to see this -- thank you!

xyzulu

webnestify So it is running locally on main enhance panel server?

See this thread.. and this link: https://cpfence.app/the-cpfence-central-dashboard-is-here-one-panel-full-power/

webdig

First of all, congratulations on the new WebUI — I’ve just had the chance to try it and it’s truly excellent. A great evolution and very helpful for those managing multiple servers!

I’d like to ask if, now with this centralized interface, there is any quick and practical way to add email addresses or domains to a blacklist of spam senders, so that my clients no longer receive emails from those sources.

Ideally, I would like to:

Add a sender domain (e.g. spammer.com) or a specific email address (e.g. newsletter@spammer.com)
Apply this rule across all servers automatically

Is there already a method for this in cPFence, or is such a feature planned?
Thanks in advance for the great work and continuous support!

Best regards,
Joao

cPFence

webdig

Thanks for the feedback , glad to hear you're starting to feel the power of the central dashboard!

And yes, this is already possible. Just select all servers from the sidebar, then head to Tools & Utilities → Spam AutoShield Tools. From there, you can block (or whitelist) domains, IPs, or specific email addresses across all your servers with one click.

Tip: it's optimized for large clusters (100+ servers), so feel free to leave the window open and continue working in another tab , the operation might take a little while to complete across all servers in large clusters.

webdig

cPFence Thanks so much for the quick reply — that's exactly what I was hoping for!
Great to know it's already built into the dashboard and optimized for large clusters.

One quick follow-up:
Over the past three years, I've compiled a fairly large list of spam domains and sender addresses. Is there a way to import these in bulk into the Spam AutoShield Tools — for example, by uploading a file or pasting multiple entries at once?

Thanks again for the fantastic work on the WebUI. It's becoming an essential tool in my daily workflow!

cPFence

webdig

Yes, that’s already possible. Just go to Edit Configuration Files → Manage Spam Domain Blocklist, paste your custom list there, and hit save.

cPFence

Version 3.3.54 (7th May 2025)

Added

- AutoMySQL killed queries monitoring:
Monitor MySQL queries automatically terminated by the Owl AutoMySQL module in real-time.
This helps in reviewing and optimizing problematic query patterns.

- Web server log monitoring (per site or server-wide):
New flexible logging tool to monitor HTTP access logs:

Per site: using the UUID
Server-wide: monitor all active domains at once

Improved

- Enhanced PHP malware detection:
New detection logic improves identification of threats in WordPress, Joomla, and Laravel applications—resulting in significantly better PHP-based malware protection.

Fixed

Resolved an issue with inaccurate WordPress site counts on large clusters.

8Dweb

cPFence FINALLY!
Thank you very much!

Yup, all 'bout those logs....

Putting the smile back in 8D

I am so happy to see that your team has tirelessly worked to improve cPFence. Great job!

webdig

cPFence Congratulations on yet another excellent evolution of CPfence — this is an important step forward in simplifying the management and control of server security, clearly demonstrating your ongoing commitment to innovation.

I would like to suggest adding native support for RBLs (Real-time Blackhole Lists), a simple yet highly effective way to reduce SPAM directly at the source.

Additionally, I recommend integrating an excellent resource: the service available at https://www.neblink.net/blocklist/, which provides regularly updated lists of malicious IPs, highly valuable for enhancing protection at both network and email server levels.

Keep up the great work — tools like CPfence are what help us keep our services secure and efficient.

cPFence

8Dweb

You're welcome, glad to see your feature request made it in and that you found it useful.

pratik_asabe

cPFence Thank you for acting on feedback swiftly, you guys are beasts!

I'd love to share a feedback or rather a feature request (if not already implemented or i overlooked) is that attempting to Auto-repair infected files instead of quarantine to avoid unfortunate downtime by critical infected file getting quarantined straightaway.. its a peace of mind knowing we don't have to investigate files and attempt to repair it or replace it the clean version.. I know its a big ask but its worth..

cPFence

pratik_asabe

You’re welcome. Auto-repair is already on our roadmap , hopefully we can get it done soon.

webdig

Thanks for the suggestions and feedback. RBL support is a solid idea, we’ll keep it in mind for a future update.

« Previous Page Next Page »