ConfigServer Community Forum

I don't have a solution to your problem, but I'd say that INVDROP is not a module, but an iptables CHAIN csf has created and makes use of. It's a chain where invalid packets are dropped, that's it. They're invalid, because they do not observe the TCP-flag rules. These are some basic rules csf applie...