{"id":18288,"date":"2026-09-26T10:42:56","date_gmt":"2026-09-26T07:42:56","guid":{"rendered":"https:\/\/www.hyyat.com\/knowledgebase\/fix-restrict-syslog-csf-warning\/"},"modified":"2026-09-26T10:42:56","modified_gmt":"2026-09-26T07:42:56","password":"","slug":"fix-restrict-syslog-csf-warning","status":"publish","type":"docs","link":"https:\/\/www.hyyat.com\/en\/knowledgebase\/fix-restrict-syslog-csf-warning\/","title":{"rendered":"How to Fix “RESTRICT_SYSLOG is disabled” in CSF"},"content":{"rendered":"
In short:<\/strong> The warning “RESTRICT_SYSLOG is disabled”<\/strong> appears in ConfigServer Security & Firewall (CSF) after installation. Fix it by setting RESTRICT_SYSLOG = 3<\/strong>, either in WHM under Plugins \u2192 ConfigServer Security & Firewall \u2192 Firewall Configuration<\/strong>, or in \/etc\/csf\/csf.conf<\/strong> over SSH, then restart CSF.<\/div>\n

The full warning shown when you open CSF is:<\/p>\n

WARNING: RESTRICT_SYSLOG is disabled. See SECURITY WARNING in Firewall Configuration<\/code><\/pre>\n
Fix from WHM<\/h2>\n
    \n
  1. Log in to WHM at https:\/\/your-server-hostname:2087<\/strong> (or https:\/\/your-server-IP:2087). Using the hostname is better.\n
    \"login<\/p>\n<\/li>\n
  2. Go to Home \u2192 Plugins<\/strong>.\n
    \"Home<\/p>\n<\/li>\n
  3. Click ConfigServer Security & Firewall<\/strong>.\n
    \"\u0627\u0646\u0642\u0631<\/p>\n<\/li>\n
  4. Click Firewall Configuration<\/strong>.\n
    \"\u0627\u0646\u0642\u0631<\/p>\n<\/li>\n
  5. Find RESTRICT_SYSLOG<\/strong> and set it to 3<\/strong>.\n
    \"\u0646\u0628\u062d\u062b<\/p>\n<\/li>\n
  6. Scroll down and click Change<\/strong>.\n
    \"\u0646\u0636\u063a\u0637<\/p>\n<\/li>\n
  7. Click Restart csf+lfd<\/strong>, then Return<\/strong>.\n
    \"\u0646\u0642\u0648\u0645<\/p>\n<\/li>\n<\/ol>\n
    Fix over SSH<\/h2>\n
      \n
    1. Connect to the server over SSH.<\/li>\n
    2. Open the CSF configuration file:\n
      nano \/etc\/csf\/csf.conf<\/code><\/pre>\n<\/li>\n
    3. Find the line RESTRICT_SYSLOG = \"0\"<\/code> and change it to RESTRICT_SYSLOG = \"3\"<\/code>.<\/li>\n
    4. Save the file and restart CSF and LFD:\n
      csf -ra<\/code><\/pre>\n<\/li>\n<\/ol>\n
      What does 3 mean?<\/strong> It restricts access to the syslog\/rsyslog socket to members of the RESTRICT_SYSLOG_GROUP, which is the setting CSF recommends.<\/p>\n
      Related service: server management and security<\/a> from Hyyat Host, with 24\/7 support.<\/p>\n","protected":false},"excerpt":{"rendered":"
      In short: The warning “RESTRICT_SYSLOG is disabled” appears in ConfigServer Security & Firewall (CSF) after installation. Fix it by setting RESTRICT_SYSLOG = 3, either in WHM under Plugins \u2192 ConfigServer Security & Firewall \u2192 Firewall Configuration, or in \/etc\/csf\/csf.conf over SSH, then restart CSF. The full warning shown when you open CSF is: WARNING: RESTRICT_SYSLOG […]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","template":"","meta":{"_eb_attr":"","inline_featured_image":false,"wprm-recipe-roundup-name":"","wprm-recipe-roundup-description":"","_templately_pack_id":"","_templately_imported_at":"","_templately_source":"","_templately_import_session_id":"","footnotes":""},"doc_category":[2734],"doc_tag":[],"class_list":["post-18288","docs","type-docs","status-publish","hentry","doc_category-whm-cpanel-control-panels"],"year_month":"2026-09","word_count":188,"total_views":0,"reactions":{"happy":0,"normal":0,"sad":0},"author_info":{"name":"ahmed fathy","author_nicename":"ahmed-fathy","author_url":"https:\/\/www.hyyat.com\/en\/author\/ahmed-fathy\/"},"doc_category_info":[{"term_name":"whm\/cpanel control panels","term_url":"https:\/\/www.hyyat.com\/en\/kb\/whm-cpanel-control-panels\/"}],"doc_tag_info":[],"knowledge_base_info":[],"knowledge_base_slug":[],"_links":{"self":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/docs\/18288","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/comments?post=18288"}],"version-history":[{"count":0,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/docs\/18288\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/media?parent=18288"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/doc_category?post=18288"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/doc_tag?post=18288"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}