error on firewall

Hi
i'm new on CWP, after instalation CWp everything seems good but not with firewall, i'd enabling firewall but after back to dashboard still show on status "OFF"

when you enable firewall  what kind of message do you get ?

Hey!

my CMP - CSF FIREWALL  is not work good and send this error when a active then.


csf and lfd are not disabled!


and when a am restart that

Flushing chain `INPUT'
Flushing chain `FORWARD'
Flushing chain `OUTPUT'
csf: FASTSTART loading DROP no logging (IPv4)
LOG  tcp opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0  limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *TCP_IN Blocked* '
LOG  tcp opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0  tcp flags:0x17/0x02 limit: avg 30/min burst 5 LOG flags 8 level 4 prefix `Firewall: *TCP_OUT Blocked* '
LOG  udp opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0  limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *UDP_IN Blocked* '
LOG  udp opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0  limit: avg 30/min burst 5 LOG flags 8 level 4 prefix `Firewall: *UDP_OUT Blocked* '
LOG  icmp opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0  limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *ICMP_IN Blocked* '
LOG  icmp opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0  limit: avg 30/min burst 5 LOG flags 8 level 4 prefix `Firewall: *ICMP_OUT Blocked* '
DROP  all opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0 
DROP  all opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0 
DENYOUT  all opt -- in * out !lo  0.0.0.0/0  -> 0.0.0.0/0 
DENYIN  all opt -- in !lo out *  0.0.0.0/0  -> 0.0.0.0/0 
ALLOWOUT  all opt -- in * out !lo  0.0.0.0/0  -> 0.0.0.0/0 
ALLOWIN  all opt -- in !lo out *  0.0.0.0/0  -> 0.0.0.0/0 
csf: FASTSTART loading Packet Filter (IPv4)
Error: FASTTART: (Packet Filter IPv4) [] [iptables-restore: line 14 failed]. Try restarting csf with FASTSTART disabled, at line 4291


My CentOS versio is CentOS release 6.6 (Final) and kernel versio is 2.6.32-34-pve / i686 [openvz]

What is prolems this system?? How fix tha... 

This proplems is solvet only install next case

vzctl set 101 --iptables ipt_REJECT --iptables ipt_tos --iptables ipt_TOS --iptables ipt_LOG --iptables ip_conntrack --iptables ipt_limit --iptables ipt_multiport --iptables iptable_filter --iptables iptable_mangle --iptables ipt_TCPMSS --iptables ipt_tcpmss --iptables ipt_ttl --iptables ipt_length --iptables ipt_state --iptables iptable_nat --iptables ip_nat_ftp --save

and reboot openvz container

Important, if you are using centos 7 : you need to disable default firewalld (shipped with Centos 7)

systemctl disable firewalld
systemctl stop firewalld

Then, Just simply disable csf

csf -x

And then re-enable it in CWP (on browser)

MikaR thank you.
I turned it on, but every day I have to do this procedure. The firewall on the panel is disabled.
What could be the problem? Maybe it's because I installed a firewall in CentOS? Later, I stopped and turned it off...

Important, if you are using centos 7 : you need to disable default firewalld (shipped with Centos 7)

systemctl disable firewalld
systemctl stop firewalld

Then, Just simply disable csf

csf -x

And then re-enable it in CWP (on browser)

Thank you. This helped me

Important, if you are using centos 7 : you need to disable default firewalld (shipped with Centos 7)

systemctl disable firewalld
systemctl stop firewalld

Then, Just simply disable csf

csf -x

And then re-enable it in CWP (on browser)

This helped me as well. Thank you

[root@148 ~]# systemctl disable firewalld
Unit /etc/systemd/system/firewalld.service is masked, ignoring.
[root@148 ~]# systemctl stop firewalld
[root@148 ~]# csf -x
*Error* The path to iptables is either not set or incorrect for IPTABLES [/sbin/                                           iptables] in /etc/csf/csf.conf at /usr/local/csf/lib/ConfigServer/URLGet.pm line                                            26.
Compilation failed in require at /usr/sbin/csf line 21.
BEGIN failed--compilation aborted at /usr/sbin/csf line 21.
[root@148 ~]#


Hi Guys how we fixed it this is a fresh install CWP with AlmaLinux 8

Thanks

What OS are you trying to run within OpenVZ?

OpenVZ was outdated awhile ago, and openvz.org doesn't even open for me.
Even their repo, redirects to https://bitbucket.org/openvz/workspace/repositories/ now.

Maybe try something newer like Proxmox with a AlmaLinux 8 or 9 environment for your testing.