Control Web Panel

Security => CSF Firewall => Topic started by: Scherlock on October 15, 2014, 08:31:58 PM

Title: Firewall Icon status on Dashboard
Post by: Scherlock on October 15, 2014, 08:31:58 PM
On my dashboard, I see this :

(http://tof.canardpc.com/view/4a21b4ce-0668-45dc-aa98-9ead1773ffa7.jpg)

Firewall is « OFF » on the icon.

But, "CSF Firewall" and "Ifd" are working !

Ifd Status :

Code: [Select]
Running /usr/local/csf/bin/csfpre.sh
csf: FASTSTART loading DROP no logging (IPv4)
LOG  tcp opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0  limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *TCP_IN Blocked* '
LOG  tcp opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0  tcp flags:0x17/0x02 limit: avg 30/min burst 5 LOG flags 8 level 4 prefix `Firewall: *TCP_OUT Blocked* '
LOG  udp opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0  limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *UDP_IN Blocked* '
LOG  udp opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0  limit: avg 30/min burst 5 LOG flags 8 level 4 prefix `Firewall: *UDP_OUT Blocked* '
LOG  icmp opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0  limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *ICMP_IN Blocked* '
LOG  icmp opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0  limit: avg 30/min burst 5 LOG flags 8 level 4 prefix `Firewall: *ICMP_OUT Blocked* '
DROP  all opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0 
DROP  all opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0 
DENYOUT  all opt -- in * out !lo  0.0.0.0/0  -> 0.0.0.0/0 
DENYIN  all opt -- in !lo out *  0.0.0.0/0  -> 0.0.0.0/0 
ALLOWOUT  all opt -- in * out !lo  0.0.0.0/0  -> 0.0.0.0/0 
ALLOWIN  all opt -- in !lo out *  0.0.0.0/0  -> 0.0.0.0/0 
csf: FASTSTART loading Packet Filter (IPv4)
DROP  all opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0 
INVALID  tcp opt -- in !lo out *  0.0.0.0/0  -> 0.0.0.0/0 
INVALID  tcp opt -- in * out !lo  0.0.0.0/0  -> 0.0.0.0/0 
csf: FASTSTART loading csf.deny (IPv4)
csf: FASTSTART loading csf.allow (IPv4)
ACCEPT  all opt -- in !lo out *  0.0.0.0/0  -> 0.0.0.0/0  state RELATED,ESTABLISHED
ACCEPT  all opt -- in * out !lo  0.0.0.0/0  -> 0.0.0.0/0  state RELATED,ESTABLISHED
csf: FASTSTART loading TCP_IN (IPv4)
csf: FASTSTART loading TCP_OUT (IPv4)
csf: FASTSTART loading UDP_IN (IPv4)
csf: FASTSTART loading UDP_OUT (IPv4)
ACCEPT  icmp opt -- in !lo out *  0.0.0.0/0  -> 0.0.0.0/0  icmp type 8 limit: avg 1/sec burst 5
ACCEPT  icmp opt -- in * out !lo  0.0.0.0/0  -> 0.0.0.0/0  icmp type 0
ACCEPT  icmp opt -- in * out !lo  0.0.0.0/0  -> 0.0.0.0/0  icmp type 8
ACCEPT  icmp opt -- in !lo out *  0.0.0.0/0  -> 0.0.0.0/0  icmp type 0 limit: avg 1/sec burst 5
ACCEPT  icmp opt -- in !lo out *  0.0.0.0/0  -> 0.0.0.0/0  icmp type 11
ACCEPT  icmp opt -- in !lo out *  0.0.0.0/0  -> 0.0.0.0/0  icmp type 3
ACCEPT  icmp opt -- in * out !lo  0.0.0.0/0  -> 0.0.0.0/0  icmp type 11
ACCEPT  icmp opt -- in * out !lo  0.0.0.0/0  -> 0.0.0.0/0  icmp type 3
ACCEPT  all opt -- in lo out *  0.0.0.0/0  -> 0.0.0.0/0 
ACCEPT  all opt -- in * out lo  0.0.0.0/0  -> 0.0.0.0/0 
LOGDROPOUT  all opt -- in * out !lo  0.0.0.0/0  -> 0.0.0.0/0 
LOGDROPIN  all opt -- in !lo out *  0.0.0.0/0  -> 0.0.0.0/0 
csf: FASTSTART loading DNS (IPv4)
LOCALOUTPUT  all opt -- in * out !lo  0.0.0.0/0  -> 0.0.0.0/0 
LOCALINPUT  all opt -- in !lo out *  0.0.0.0/0  -> 0.0.0.0/0 
Running /usr/local/csf/bin/csfpost.sh
Starting lfd:[  OK  ]
csf and lfd have been enabled

When I press the "lfd Status" blue button In Security/CSF Firewall I see :
« Status of lfd:lfd (pid  27119) is running… »

What is the problem on the icon?

Thank you.
Title: Re: Firewall Icon status on Dashboard
Post by: Administrator on October 15, 2014, 11:38:39 PM
what is your output of command ?
service lfd status
Title: Re: Firewall Icon status on Dashboard
Post by: Scherlock on October 16, 2014, 07:14:20 PM
In french :
Code: [Select]
Status of lfd:lfd (pid  5172) en cours d'exécution...
Translated into English :
Quote
Status of LFD: LFD (pid 5172) running ...
Title: Re: Firewall Icon status on Dashboard
Post by: Scherlock on October 17, 2014, 07:42:14 PM
No idea to solve the problem?
Title: Re: Firewall Icon status on Dashboard
Post by: Administrator on October 18, 2014, 06:06:19 AM
the issue is that you are not using english version of the linux.
Title: Re: Firewall Icon status on Dashboard
Post by: Scherlock on October 18, 2014, 06:00:10 PM
Thank you ! This is the solution. With CentOS in English it works fine now: the "ON" icon is green! :)
Title: Re: Firewall Icon status on Dashboard
Post by: erm3nda on January 19, 2015, 09:28:37 AM
I got a similar problem, but mine is really OFF (i've checked).

I dont know why, but sometimes i come into the panel and noticed the CFS firewall is stoped.
Title: Re: Firewall Icon status on Dashboard
Post by: Administrator on March 11, 2015, 12:22:23 AM
if your firewall is stopped then you need to check logs and what is causing this issue.