Search found 4 matches

by tdousset
18 May 2015, 00:36
Forum: General Discussion (csf)
Topic: ACCEPT rule created on OUTPUT Chain
Replies: 5
Views: 2640

Re: ACCEPT rule created on OUTPUT Chain

Hi,

Thanks for the info - it looks like rebuilding the config with csf -uf and then restarting csf has rectified the issue.

I have not narrowed exactly which config key is responsible yet though.

Thanks.
by tdousset
14 May 2015, 02:50
Forum: General Discussion (csf)
Topic: ACCEPT rule created on OUTPUT Chain
Replies: 5
Views: 2640

Re: ACCEPT rule created on OUTPUT Chain

root@host [~]# csf --version
csf: v7.68 (cPanel)

I suppose it's possible that we've carried an old configuration through several version upgrades. So LF_SPI was new in 7.66 by the looks of it.
by tdousset
14 May 2015, 02:46
Forum: General Discussion (csf)
Topic: ACCEPT rule created on OUTPUT Chain
Replies: 5
Views: 2640

Re: ACCEPT rule created on OUTPUT Chain

Hi,

I don't have the LF_SPI key in the current config...
by tdousset
13 May 2015, 04:32
Forum: General Discussion (csf)
Topic: ACCEPT rule created on OUTPUT Chain
Replies: 5
Views: 2640

ACCEPT rule created on OUTPUT Chain

Hi, Bit of an odd one. It seems that CSF is creating an ACCEPT rule at the bottom of the OUTPUT chain. # csf -X # iptables -P INPUT ACCEPT # iptables -P OUTPUT ACCEPT # iptables -F # iptables -nL Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot...