ConfigServer Community Forum

Hello,

( Its resolved after the new update )
After today latest auto upgrade to 8.17, CSF dosent load on WHM/cPanel it keeps loading

UPDATE "Temporary Solution":

After I SSH and execute csf -r, the process didnt completed, andI watched the logs:

Apr 4 20:08:59 xxx lfd[1009283]: *Error* Excessive number of children (201), restarting lfd...
Apr 4 20:08:59 xxx lfd[1009283]: daemon restart requested
## ....
Apr 4 20:08:59 xxx lfd[835649]: HUP
Apr 4 20:08:59 xxx lfd[834316]: HUP
Apr 4 20:08:59 xxx lfd[835649]: daemon stopped
## ... lots of repeted logs like above for 1 minute
Apr 4 20:09:01 xxx lfd[837912]: daemon started on xx.xx.xx - csf v8.17 (cPanel)
Apr 4 20:09:01 xxx lfd[837912]: CSF Tracking...
Apr 4 20:09:01 xxx lfd[837912]: IPv6 Enabled...
Apr 4 20:09:01 xxx lfd[837912]: LOAD Tracking...
Apr 4 20:09:01 xxx lfd[837912]: Country Code Lookups...
Apr 4 20:09:01 xxx lfd[837912]: Country Code Ignores...
Apr 4 20:09:01 xxx lfd[837912]: Email Script Tracking...
Apr 4 20:09:01 xxx lfd[837912]: Email Queue Tracking...
Apr 4 20:09:01 xxx lfd[837912]: Email Relay Tracking...
Apr 4 20:09:01 xxx lfd[837912]: Temp to Perm Block Tracking...
Apr 4 20:09:02 xxx lfd[837912]: System Statistics...
Apr 4 20:09:03 xxx lfd[837912]: Port Scan Tracking...
Apr 4 20:09:03 xxx lfd[837912]: Connection Tracking...
Apr 4 20:09:03 xxx lfd[837912]: Account Tracking...
Apr 4 20:09:03 xxx lfd[837912]: SSH Tracking...
Apr 4 20:09:03 xxx lfd[837912]: SU Tracking...
Apr 4 20:09:03 xxx lfd[837912]: Console Tracking...
Apr 4 20:09:03 xxx lfd[837912]: WHM Tracking...
Apr 4 20:09:03 xxx lfd[837912]: Watching /var/log/maillog...
Apr 4 20:09:03 xxx lfd[837912]: Watching /var/log/exim_mainlog...
Apr 4 20:09:03 xxx lfd[837912]: Watching /var/log/messages...
Apr 4 20:09:03 xxx lfd[837912]: Watching /var/log/secure...
Apr 4 20:09:03 xxx lfd[837912]: Watching /usr/local/cpanel/logs/login_log...
Apr 4 20:09:03 xxx lfd[837912]: Watching /usr/local/apache/logs/error_log...
Apr 4 20:09:03 xxx lfd[837912]: Watching /usr/local/cpanel/logs/access_log...

### then CSF was not runing (Firewall Check was showing: csf running check iptables is not configured. You need to start csf) but LFD was OK, but I could finally access on WHM CSF GUI, so I killed all CSF processes runing after I did an Quick Restart, and it seams ok now:

Apr 4 20:26:21 xxx lfd[837912]: csf (re)start requested - running *csf startup*...
Apr 4 20:26:23 xxx lfd[837912]: csf (re)start completed

Thanks anyway

Thanks in advance,
PauloV

I noticed the same issue on several cpanel servers with 8.17. The CSF page in WHM is blank.
Restart CSF stuck at:

csf: FASTSTART loading Packet Filter (IPv4)
DROP all opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0
INVALID tcp opt -- in !lo out * 0.0.0.0/0 -> 0.0.0.0/0
INVALID tcp opt -- in * out !lo 0.0.0.0/0 -> 0.0.0.0/0

Suppose it should load csf.deny next.

Just kill all CSF running processes and then restart CSF

Sorry I have cheked again and its again stuck on all our servers, WHM CSF GUI dosent load again.

Its seams its stuck trying to:

/usr/local/cpanel/3rdparty/bin/perl /usr/sbin/csf -d XX.XX.XX.XX lfd: (PERMBLOCK) XX.XX.XX.XX (XXXXX/XXXXX) has had more than 2 temp blocks in the last 86400 secs

The only temporary solution is to kill all CSF processes and restart again CSF

Any news on an update?

Regards,
PV

There's nothing we can do unless someone logs a ticket on our helpdesk with access to a server and instructions on how to replicate the problem that we can see this happening on as we are unable to replicate the issue.

Also we have hundreds of processes runing like this:

lfd - (child) blocking XX.XX.XX.XX
lfd - (child) blocking XX.XX.XX.XX
lfd - (child) blocking XX.XX.XX.XX
lfd - (child) blocking XX.XX.XX.XX
lfd - (child) blocking XX.XX.XX.XX
...

I have done now was:

csf --lfd restart
csf -ra

Its running OK now.

lets see if it works

We've release v8.18 with a fix which will hopefully address this issue if you can kill all instances of csf and upgrade.

ForumAdmin wrote:We've release v8.18 with a fix which will hopefully address this issue if you can kill all instances of csf and upgrade.

How can I stop all processes of CSF if I cannot access the CSF interface?

sobeinfo wrote:

ForumAdmin wrote:We've release v8.18 with a fix which will hopefully address this issue if you can kill all instances of csf and upgrade.

How can I stop all processes of CSF if I cannot access the CSF interface?

SSH to the server, then run following command to kill all lfd process

csf --lfd restart

Update csf with this command:

csf -u

Hello,

Thanks

It seams is 100% resolved after the update

Regards,
PV