Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am using csf & lfd, I am trying to allow all traffic to a specific IP (my backup storage) which I'm using lftp to access.

I have tried using csf.allow, but you have to specify a port or a range. I've also tried adding the ip to csf.ignore

Neither of these approaches create any IPtables rules to allow traffic, adding a rule manually

iptables -A OUTPUT -p tcp -d -j ACCEPT works fine but cleaned by csf on restart

share|improve this question
up vote 1 down vote accepted

Create a file /etc/csf/ and add your iptable rule.

/sbin/iptables -A OUTPUT -p tcp -d -j ACCEPT

chmod to created script

chmod +x /etc/csf/

CSF run during startup.

share|improve this answer
superb, works perfectly, thanks and welcome to S.F – Rob May 8 '12 at 16:39

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.