Not sure if this is possible with CSF, but is there a way to watch log files that get out of control? I had a small problem today messing about with modsecurity and set this bit:
SecDebugLogLevel 5
along with some very tight rules, apparently blocking blackberry access to one account with lots of traffic. Anyway, I got sidetracked and forgot to go back and dial it back down. Needless to say the modsec_debug_log grew way out of control almost filling the entire drive in a matter of hours before I got notified by the server that I was running low on space.