ConfigServer Community Forum

Hi,

Its look like there come some problems when my installation upgrade to 9.07

cPanel Monitoring
Jul 05 13:57:29 web1.myserver.com systemd[1]: Starting ConfigServer Firewall & Security - lfd...
Jul 05 13:57:30 web1.myserver.com lfd[829351]: Error: You have an unresolved error when starting csf. You need to restart csf successfully before starting lfd (see /etc/csf/csf.error)
Jul 05 13:57:30 web1.myserver.com systemd[1]: PID file /var/run/lfd.pid not readable (yet?) after start.
Jul 05 13:57:30 web1.myserver.com systemd[1]: Failed to start ConfigServer Firewall & Security - lfd.
Jul 05 13:57:30 web1.myserver.com systemd[1]: Unit lfd.service entered failed state.
Jul 05 13:57:30 web1.myserver.com systemd[1]: lfd.service failed.

I i try to restart CSF i got this error
ALLOWOUT all opt in * out !lo ::/0 -> ::/0
ALLOWIN all opt in !lo out * ::/0 -> ::/0
csf: FASTSTART loading Packet Filter (IPv4)
csf: FASTSTART loading Packet Filter (IPv6)
DROP all opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0
INVALID tcp opt -- in !lo out * 0.0.0.0/0 -> 0.0.0.0/0
INVALID tcp opt -- in * out !lo 0.0.0.0/0 -> 0.0.0.0/0
DROP all opt in * out * ::/0 -> ::/0
INVALID tcp opt in !lo out * ::/0 -> ::/0
INVALID tcp opt in * out !lo ::/0 -> ::/0
csf: FASTSTART loading csf.deny (IPv4)
csf: FASTSTART loading csf.deny (IPv4 nat)
csf: FASTSTART loading csf.deny (IPv6)
Error: FASTSTART: (csf.deny IPv6) [] [ip6tables-restore v1.4.21: The -t option (seen in line 4) cannot be used in ip6tables-restore.]. Try restarting csf with FASTSTART disabled, at line 4911

The server setup is CloudLinux 7.2 with cPanel

// Jhave

That would suggest a problem with an IPv6 address entry in your /etc/csf/csf.deny file. If you can identify the entry and quote it here it might suggest why you are seeing an issue.

On further testing we have found an issue which we will investigate

This was actually not supported in csf before (IPv6 MESSENGER when IPSET not used). We've added support for it in v9.08 which we have just released:
http://blog.configserver.com

If i use the upgrade button i got this error.

Upgrading csf...

You have an unresolved error when starting csf:
Error: FASTSTART: (csf.deny IPv6) [] [ip6tables-restore v1.4.21: The -t option (seen in line 4) cannot be used in ip6tables-restore.]. Try restarting csf with FASTSTART disabled, at line 4911 in /usr/sbin/csf

You need to restart csf successfully to remove this warning, or delete /etc/csf/csf.error
...Done.

How do i upgrade ?

Delete /etc/csf/csf.error and then upgrade using:

Thanks

Its works now