CSF dosent Load on WHM after upgrade to 8.17 (RESOLVED After Update)

This forum is only for reproducible bugs with csf and lfd (i.e. not iptables problems, lack of understanding how to use a feature, etc). Posts must be accompanied with full technical details of the problem and how it can be recreated. Any posts not adhering to this, or not considered bugs, will be moved to the General Discussion (csf) forum.
Post Reply
qlpqlp
Junior Member
Posts: 6
Joined: 04 Apr 2016, 19:33

CSF dosent Load on WHM after upgrade to 8.17 (RESOLVED After Update)

Post by qlpqlp »

Hello,

( Its resolved after the new update :) )
After today latest auto upgrade to 8.17, CSF dosent load on WHM/cPanel it keeps loading

UPDATE "Temporary Solution":

After I SSH and execute csf -r, the process didnt completed, andI watched the logs:

Apr 4 20:08:59 xxx lfd[1009283]: *Error* Excessive number of children (201), restarting lfd...
Apr 4 20:08:59 xxx lfd[1009283]: daemon restart requested
## ....
Apr 4 20:08:59 xxx lfd[835649]: HUP
Apr 4 20:08:59 xxx lfd[834316]: HUP
Apr 4 20:08:59 xxx lfd[835649]: daemon stopped
## ... lots of repeted logs like above for 1 minute
Apr 4 20:09:01 xxx lfd[837912]: daemon started on xx.xx.xx - csf v8.17 (cPanel)
Apr 4 20:09:01 xxx lfd[837912]: CSF Tracking...
Apr 4 20:09:01 xxx lfd[837912]: IPv6 Enabled...
Apr 4 20:09:01 xxx lfd[837912]: LOAD Tracking...
Apr 4 20:09:01 xxx lfd[837912]: Country Code Lookups...
Apr 4 20:09:01 xxx lfd[837912]: Country Code Ignores...
Apr 4 20:09:01 xxx lfd[837912]: Email Script Tracking...
Apr 4 20:09:01 xxx lfd[837912]: Email Queue Tracking...
Apr 4 20:09:01 xxx lfd[837912]: Email Relay Tracking...
Apr 4 20:09:01 xxx lfd[837912]: Temp to Perm Block Tracking...
Apr 4 20:09:02 xxx lfd[837912]: System Statistics...
Apr 4 20:09:03 xxx lfd[837912]: Port Scan Tracking...
Apr 4 20:09:03 xxx lfd[837912]: Connection Tracking...
Apr 4 20:09:03 xxx lfd[837912]: Account Tracking...
Apr 4 20:09:03 xxx lfd[837912]: SSH Tracking...
Apr 4 20:09:03 xxx lfd[837912]: SU Tracking...
Apr 4 20:09:03 xxx lfd[837912]: Console Tracking...
Apr 4 20:09:03 xxx lfd[837912]: WHM Tracking...
Apr 4 20:09:03 xxx lfd[837912]: Watching /var/log/maillog...
Apr 4 20:09:03 xxx lfd[837912]: Watching /var/log/exim_mainlog...
Apr 4 20:09:03 xxx lfd[837912]: Watching /var/log/messages...
Apr 4 20:09:03 xxx lfd[837912]: Watching /var/log/secure...
Apr 4 20:09:03 xxx lfd[837912]: Watching /usr/local/cpanel/logs/login_log...
Apr 4 20:09:03 xxx lfd[837912]: Watching /usr/local/apache/logs/error_log...
Apr 4 20:09:03 xxx lfd[837912]: Watching /usr/local/cpanel/logs/access_log...

### then CSF was not runing (Firewall Check was showing: csf running check iptables is not configured. You need to start csf) but LFD was OK, but I could finally access on WHM CSF GUI, so I killed all CSF processes runing after I did an Quick Restart, and it seams ok now:

Apr 4 20:26:21 xxx lfd[837912]: csf (re)start requested - running *csf startup*...
Apr 4 20:26:23 xxx lfd[837912]: csf (re)start completed

Thanks anyway :)

Thanks in advance,
PauloV
Last edited by qlpqlp on 07 Apr 2016, 11:14, edited 4 times in total.
puppet
Junior Member
Posts: 22
Joined: 04 Apr 2012, 00:10

Re: CSF dosent Load on WHM after upgrade to 8.17 (RESOLVED)

Post by puppet »

I noticed the same issue on several cpanel servers with 8.17. The CSF page in WHM is blank.
Restart CSF stuck at:
csf: FASTSTART loading Packet Filter (IPv4)
DROP all opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0
INVALID tcp opt -- in !lo out * 0.0.0.0/0 -> 0.0.0.0/0
INVALID tcp opt -- in * out !lo 0.0.0.0/0 -> 0.0.0.0/0
Suppose it should load csf.deny next.
qlpqlp
Junior Member
Posts: 6
Joined: 04 Apr 2016, 19:33

Re: CSF dosent Load on WHM after upgrade to 8.17 (RESOLVED)

Post by qlpqlp »

Just kill all CSF running processes and then restart CSF :)
qlpqlp
Junior Member
Posts: 6
Joined: 04 Apr 2016, 19:33

Re: CSF dosent Load on WHM after upgrade to 8.17 (RESOLVED)

Post by qlpqlp »

Sorry I have cheked again and its again stuck on all our servers, WHM CSF GUI dosent load again.

Its seams its stuck trying to:

/usr/local/cpanel/3rdparty/bin/perl /usr/sbin/csf -d XX.XX.XX.XX lfd: (PERMBLOCK) XX.XX.XX.XX (XXXXX/XXXXX) has had more than 2 temp blocks in the last 86400 secs

The only temporary solution is to kill all CSF processes and restart again CSF :(

Any news on an update?

Regards,
PV
ForumAdmin
Moderator
Posts: 1504
Joined: 01 Oct 2008, 09:24

Re: CSF dosent Load on WHM after upgrade to 8.17 (NOT RESOLVED)

Post by ForumAdmin »

There's nothing we can do unless someone logs a ticket on our helpdesk with access to a server and instructions on how to replicate the problem that we can see this happening on as we are unable to replicate the issue.
qlpqlp
Junior Member
Posts: 6
Joined: 04 Apr 2016, 19:33

Re: CSF dosent Load on WHM after upgrade to 8.17 (NOT RESOLVED)

Post by qlpqlp »

Also we have hundreds of processes runing like this:

lfd - (child) blocking XX.XX.XX.XX
lfd - (child) blocking XX.XX.XX.XX
lfd - (child) blocking XX.XX.XX.XX
lfd - (child) blocking XX.XX.XX.XX
lfd - (child) blocking XX.XX.XX.XX
...

I have done now was:

csf --lfd restart
csf -ra

Its running OK now.

lets see if it works :)
ForumAdmin
Moderator
Posts: 1504
Joined: 01 Oct 2008, 09:24

Re: CSF dosent Load on WHM after upgrade to 8.17 (NOT RESOLVED)

Post by ForumAdmin »

We've release v8.18 with a fix which will hopefully address this issue if you can kill all instances of csf and upgrade.
sobeinfo
Junior Member
Posts: 1
Joined: 27 Jan 2016, 19:29

Re: CSF dosent Load on WHM after upgrade to 8.17 (NOT RESOLVED)

Post by sobeinfo »

ForumAdmin wrote:We've release v8.18 with a fix which will hopefully address this issue if you can kill all instances of csf and upgrade.

How can I stop all processes of CSF if I cannot access the CSF interface?
puppet
Junior Member
Posts: 22
Joined: 04 Apr 2012, 00:10

Re: CSF dosent Load on WHM after upgrade to 8.17 (NOT RESOLVED)

Post by puppet »

sobeinfo wrote:
ForumAdmin wrote:We've release v8.18 with a fix which will hopefully address this issue if you can kill all instances of csf and upgrade.

How can I stop all processes of CSF if I cannot access the CSF interface?
SSH to the server, then run following command to kill all lfd process

csf --lfd restart

Update csf with this command:

csf -u
qlpqlp
Junior Member
Posts: 6
Joined: 04 Apr 2016, 19:33

Re: CSF dosent Load on WHM after upgrade to 8.17 (RESOLVED After Update)

Post by qlpqlp »

Hello,

Thanks :)

It seams is 100% resolved after the update :)

Regards,
PV
Post Reply