Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am using csf & lfd, I am trying to allow all traffic to a specific IP (my backup storage) which I'm using lftp to access.

I have tried using csf.allow, but you have to specify a port or a range. I've also tried adding the ip to csf.ignore

Neither of these approaches create any IPtables rules to allow traffic, adding a rule manually

iptables -A OUTPUT -p tcp -d xxx.xxx.xxx.xxx -j ACCEPT works fine but cleaned by csf on restart

share|improve this question

1 Answer 1

up vote 1 down vote accepted

Create a file /etc/csf/csfpre.sh and add your iptable rule.

/sbin/iptables -A OUTPUT -p tcp -d xxx.xxx.xxx.xxx -j ACCEPT

chmod to created script csfpre.sh

chmod +x /etc/csf/csfpre.sh

CSF run csfpre.sh during startup.

share|improve this answer
    
superb, works perfectly, thanks and welcome to S.F –  Rob May 8 '12 at 16:39

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.