ConfigServer Community Forum

DROP_OUT_LOGGING option is disabled, but we still receive a lot of "Tracking Hit" notifications with "Firewall: *TCP_OUT Blocked*" on all servers.

I also see that LOGDROPOUT chain is really still configured in iptables after CSF restart...

Is this a bug, or I am missing some additional configuration that is the cause of this behavior?

Thanks.

It's a bug. We'll have a fix for it in the next csf release.

This should now be fixed in v6.47:
http://blog.configserver.com/