#!/bin/bash
# Simple check for CSF (ConfigServer Security & Firewall)
# Version: 1.0

if [ -d /etc/csf ]; then
    if [[ "$(sudo csf --status | grep DROP -c)" -gt 0 ]]; then
        if [[ "$(ps aux | grep 'lfd' | grep -v grep | wc -l)" -eq 0 ]]; then
            echo "CSF CRITICAL – CSF is running but LFD is stopped"
            exit 2
        fi
        echo "CSF OK – Running"
        exit 0
    else
        echo "CSF CRITICAL – NOT Running"
        exit 2
    fi
else
    echo "CSF CRITICAL – NOT installed"
    exit 2
fi