How to check if CSF firewall is running

Question

My ex-system admin installed CSF on a server witout Admin panel. I can see CSF installed but I am not sure if its currently running or not. I dont want to try to start / stop it.

I realized there is no PID file concept in CSF and I am finding it hard to know if the server is currently running CSF or not.

ooshro · Accepted Answer · 2011-02-24T11:16:53.600

2

Use "Firewall information" or "Check server security" in CSF.

Or run in shell(if firewall run output contain many rules)

sudo iptables -nv -L

edited Feb 24 '11 at 11:16

answered Feb 24 '11 at 11:11

ooshro

10,874
1
31
31

if he has only rules in say nat table you wont see antything with that -nv -L – Hrvoje Špoljar Feb 24 '11 at 11:40
@HrvojeŠpoljar CSF don't support nat table. CSF control only filter table. – ooshro Feb 24 '11 at 11:44
heh well who knows what may or may not be there, OP mentions "ex-admin" you never know what someone left before you... – Hrvoje Špoljar Feb 24 '11 at 11:46
I tried using this command and got some enteries. How to be sure that CSF is running and the rules were not added manually – Sparsh Gupta Feb 25 '11 at 11:19
Block IP from CSF, then `iptables -nv -L|grep BLOCKIP` – ooshro Feb 25 '11 at 11:22

score 1 · Answer 2 · answered Feb 24 '11 at 11:10

1

run

iptables-save

command and check out what output is.

answered Feb 24 '11 at 11:10

Hrvoje Špoljar

5,162
25
42

score 0 · Answer 3 · answered Nov 30 '13 at 16:41

root@vps ~/ # csf -l
csf and lfd have been disabled, use 'csf -e' to enable
root@vps ~/ # csf -e |head
DROP  tcp opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0  tcp dpt:67
DROP  udp opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0  udp dpt:67
DROP  tcp opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0  tcp dpt:68
DROP  udp opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0  udp dpt:68
DROP  tcp opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0  tcp dpt:111
DROP  udp opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0  udp dpt:111
DROP  tcp opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0  tcp dpt:113
DROP  udp opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0  udp dpt:113
DROP  tcp opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0  tcp dpts:135:139
DROP  udp opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0  udp dpts:135:139

I'm using "head" because I have VERBOSE enabled

 258 # Enable verbose output of iptables commands
 259 VERBOSE = "1"

If you change it to 0, you will get:

root@vps ~/ # csf -e
Starting lfd:[  OK  ]
csf and lfd have been enabled
root@vps ~/ #

Shit.. 2 years old ... Sorry – user319660 Nov 30 '13 at 16:41 — user319660, Nov 30 '13 at 16:41

score 0 · Answer 4 · answered Sep 06 '19 at 08:36

0

If CSF and LFD are already enabled, then running the following command

sudo csf -e

will output

csf and lfd are not disabled!

In addition you can try the following:

sudo service csf status

answered Sep 06 '19 at 08:36

spinozarabel

1
1

How to check if CSF firewall is running

4 Answers4