initup not loading modules on startup when FASTSTART is set
Posted: 22 Aug 2013, 18:44
Hello,
we've recently began noticing that when we reboot a server, PASSIVE FTP is not working anymore. After investigating, it appeared that the ip_conntrack_ftp module was not loaded. We were able to track down the problem to the fact that when we reboot a server while having FASTSTART on, csf will start from the init script using csf --initup, it'll notice that FASTSTART is set and that I have a /etc/csf/csf.4.saved file and will proceed to restore this file's rules. However, it will never get to the module loading phase which is in the dostart subroutine. This works fine for the most part because the server already loads the iptables modules by default but not all of them.
A fix for this will be to separate the module loading into a different subroutine and call that from both dostart and initup /w FASTSTART in order to have the proper modules loaded.
In the meantime, we decided to disable FASTSTART.
we've recently began noticing that when we reboot a server, PASSIVE FTP is not working anymore. After investigating, it appeared that the ip_conntrack_ftp module was not loaded. We were able to track down the problem to the fact that when we reboot a server while having FASTSTART on, csf will start from the init script using csf --initup, it'll notice that FASTSTART is set and that I have a /etc/csf/csf.4.saved file and will proceed to restore this file's rules. However, it will never get to the module loading phase which is in the dostart subroutine. This works fine for the most part because the server already loads the iptables modules by default but not all of them.
A fix for this will be to separate the module loading into a different subroutine and call that from both dostart and initup /w FASTSTART in order to have the proper modules loaded.
In the meantime, we decided to disable FASTSTART.