Install
wget http://www.configserver.com/free/csf.tgz
tar -xzf csf.tgz
cd csf
./install.sh
Edit configuration from WHM> ConfigServer Security & Firewall > Plugins or manually from /etc/csf/csf.conf .
Enable incoming connections on ports 1935 and 5080 for Red5 support.