ConfigServer Community Forum

Hi,

I'm trying to setup csf firewall on hostgator vps. I'v setup csf firewall on multiple servers before and never had an issue with it .

Unfortunately on this server each time I enable csf firewall, all traffic is beeing dropped.
e.g.

Feb 14 02:08:25 hostname kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=Macaddres SRC=UserIP DST=ServerIP LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=52420 DF PROTO=TCP SPT=40190 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0
Feb 14 02:08:26 hostname kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT=MAC=Macaddres SRC=UserIP DST=ServerIP LEN=60=0x00 SYN URGP=0
Feb 14 02:08:28 hostname kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=Macaddres SRC=UserIP DST=ServerIP LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=52422 DF PROTO=TCP SPT=40190 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0
Feb 14 02:08:32 hostname kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=Macaddres SRC=UserIP DST=ServerIP LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=52423 DF PROTO=TCP SPT=40190 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0

I ran /etc/csf/csftest and everything is ok
Testing ip_tables/iptable_filter...OK
Testing ipt_LOG...OK
Testing ipt_multiport/xt_multiport...OK
Testing ipt_REJECT...OK
Testing ipt_state/xt_state...OK
Testing ipt_limit/xt_limit...OK
Testing ipt_recent...OK
Testing xt_connlimit...OK
Testing ipt_owner/xt_owner...OK
Testing iptable_nat/ipt_REDIRECT...OK
Testing iptable_nat/ipt_DNAT...OK

RESULT: csf should function on this server

This is cpanel/whm server/ Centos 6.6 with kernel 2.6.32-504.8.1.el6.x86_64

Upon contacting hostgator support, I was told that csf firewall should work on their servers and told that installation/setup is 25$. But since I'v done it numerous time before I don't see why it wouldn't work on this server ?

Anyone had simmilar experience ?

nevermind, seems they had their own firewall running on the vps that conflicted with the csf