Firewall off in cwp panel

Started by setecabanas, October 14, 2025, 03:07:58 PM

Previous topic - Next topic

setecabanas

firewall appears disabled in cwp panel

but csf is working correctly

[root@s3 services]# csf -e
csf and lfd are not disabled!

[root@s3 services]# csf -e
csf and lfd are not disabled!


any idea?

overseer

Try toggling it on/off/on in the web GUI -- sometimes it gets out of sync with the actual CSF reality (a bug).

setecabanas

Yes thanks, I had already tried that but nothing.

Starburst

SSH into the server, and from the CLI:

csf -e, if working you should see what you are "csf and lfd are not disabled!"
That's a good thing.

Then run:

systemctl start csf

systemctl start lfd

systemctl enable csf

systemctl enable lfd

Some system are weird.

Log back into CWP, and it should show as 'On' now.

setecabanas


setecabanas

I have tried to install a new server with Almalinux 9
So, in a fresh installation same problem. But it is not important, only affects cwp panel

[root@s3 almalinux]# csf -e
csf and lfd are not disabled!
[root@s3 almalinux]#
[root@s3 almalinux]#
[root@s3 almalinux]# systemctl start csf
[root@s3 almalinux]# systemctl start lfd
[root@s3 almalinux]# systemctl enable csf
[root@s3 almalinux]# systemctl enable lfd

overseer

And you've rebooted? Sometimes it takes a full reboot to get itself sorted out! :P

setecabanas

No, I had already restarted several times :D

I have no idea what's going on.
Do you know what the CWP checks to make it appear as activated?

overseer

It checks your IP address as registered in their system -- so your server connects to their licensing server to confirm that it is activated as CWP Pro.
Running /scripts/update_cwp will trigger the check daily.

And for good measure, here's their wiki article about CSF/LFD configuration:
https://wiki.centos-webpanel.com/csflfd-firewall-configuration

setecabanas

So, is very strange.

- lfd process is running

[root@s3 home]# ps -ef |grep lfd
root        1701       1  0 11:15 ?        00:00:26 lfd - sleeping


- cwp license pro is ok
- csf is enabled

However in cwp panel CSF is not enabled

i don´t know what happened :(

Starburst

What OS are you running on the server?

setecabanas

Distro Name: AlmaLinux release 9.6

[root@s3 csf]# csf -v
csf: v15.00 (CentOS Web Panel)

Starburst

That's what we run.

Usually once you start it & enable it via the CLI, and maybe reboot, CWP will see it running.

All CWP is doing in the background is running
systemctl status csf
And then displaying On/Off

setecabanas

If it works for you, then I assume it's something specific to my server. But whatever. It's just a matter of ignoring the warning in CWP panel.

[root@s3 /]# systemctl status csf
● csf.service - ConfigServer Firewall & Security - csf
     Loaded: loaded (/usr/lib/systemd/system/csf.service; enabled; preset: disabled)
     Active: active (exited) since Sat 2025-10-18 11:51:50 UTC; 17h ago
   Main PID: 775 (code=exited, status=0/SUCCESS)
        CPU: 490ms

Oct 18 11:51:49 s3.domineando.eu systemd[1]: Starting ConfigServer Firewall & Security - csf...
Oct 18 11:51:50 s3.domineando.eu csf[775]: (restoring iptables) (restoring ip6tables)
Oct 18 11:51:50 s3.domineando.eu systemd[1]: Finished ConfigServer Firewall & Security - csf.