Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Intending to clear my iptables rules (i have like a thousand rules which block many customer IPs, and I can't find which is doing it), I removed all csf.deny entries, then :

  • service iptables stop
  • csf --disable
  • rm /etc/sysconfig/iptables
  • iptables --flush
  • service iptables status (shows empty rules)
  • csf --enable

Now all the rules are restored and added to iptables! This is driving me nuts as I can't stop it. Box is CentOS 5.5 on a VPS,, running CPanel

share|improve this question

grep an IP which you belevie it is blocked in /etc/csf/

grep IP /etc/csf/* -irl
share|improve this answer
whats the use? Almost no-one except for myself (with an allow entry in csf.allow) can access the server. i have no specific IP but there are plenty of ranged rules that i think cover almost any ip. – AbiusX Mar 26 '11 at 22:23
up vote 0 down vote accepted

I found the solution, seems like CSF gets a huge list of rules from SPAMHAUS and drops them all, and also from DSHIELD, thus i could not remove them (there is an option to disable these in csf.conf),

Also the default policy somehow has been change to DROP all, so using this I made it accept all :

iptables -P INPUT ACCEPT # iptables way
csf -a # csf way

And now everything is fine.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.