ConfigServer Community Forum

centos7 + cpanel . The default firewall for centos7 is `firewalld`.

When installing csf on centos7 server, I found `firewalld` was automatically disabled.
but `iptables ` was not automatically installed.

so it becomes no firewall on the server?

Under this circumstance,
# systemctl status iptables : not found
# systemctl status firewalld : inactive
# systemctl status csf : inactive

but strangely, csf + lfd + iptables seems working fine even though `iptables` is `not found` and csf status is `inactive` .
It can block IPs by csf+lfd . On WHM, Firewall Status: Enabled and Running .
I did `csf -s`. but It still shows `inactive`

I don`t understand why they are working without iptables installation and with that csf status(inactive).
Why?
Do I need to install iptables?

I actually tried installing iptables and enabled it afterwards.
# yum -y install iptables-services
# systemctl start iptables
# systemctl start ip6tables
# systemctl enable iptables
# systemctl enable ip6tables

now Under this circumstance,
# systemctl status iptables : active
# systemctl status csf : active

ok, they are all active now . and csf+lfd+iptables are working fine just like before.

Again, Do I need to install iptables? Why csf+lfd+iptables were also working without iptables installation and inactive csf status?

iptables is always installed by default. Neither firewalld nor iptables-services are needed to run it.