CC_ALLOW_FILTER and ipset not working

[ale-ab]

Hello,
i have a vps (kmv) and i would block all incoming connections outside Italy.

this server is
Centos 7 + cpanel

so i disable cphulk and install CSF.
then install
yum -y install ipset

my CSF conf is:
...
CC_ALLOW_FILTER = IT
...
LF_IPSET = On
...
FASTSTART = Off
...

restart CSF , i tried reboot server also but i can connect from another my server located in France.

if i disable LF_IPSET , it works but it's very slow...

should i do anything else?

Thank you in advance

Alessandro

[ale-ab]

i found the problem...

i edit configuration in this way

TCP_IN = empty
CC_ALLOW_FILTER = IT
CC_ALLOW_PORTS = IT
CC_ALLOW_PORTS_TCP = 80,443,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096

LF_IPSET = On

FASTSTART = Off

now work correctly,

thank you