We are using the csf RELAYHOSTS setting to prevent lfd from creating temporary firewall entries for customers who successfully check email. We are not on cPanel, so the setting isn't normally there, but it works well. We have a separate daemon that maintains /etc/relayhosts with the IPs of recent successful connections.
The problem is that during a csf upgrade it seems to strip the RELAYHOSTS setting out of the configuration file. Is there any way to prevent this from happening? If not, is there a way to include a second configuration file that overrides the main config file so we don't lose the RELAYHOSTS setting?