LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 02-23-2019, 04:27 AM   #1
webx99
Member
 
Registered: Feb 2019
Distribution: Centos 7
Posts: 103

Rep: Reputation: 11
Question csf invalid chain


Greetings

I use csf (Centos 6) 64bit and noticed some "invalid" when restarting csf.

from csf -l :

Chain INPUT (policy DROP 0 packets, 0 bytes)
num pkts bytes target prot opt in out source destination

...
....
17 3438 296K INVALID tcp -- !lo * 0.0.0.0/0 0.0.0.0/0

...


and also:

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
num pkts bytes target prot opt in out source destination

...
...

20 3890 5630K INVALID tcp -- * !lo 0.0.0.0/0 0.0.0.0/0

.....

more:

Chain INVALID (2 references)

1 25 1000 INVDROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID



when restarting csf (csf -r):

...
Flushing chain `INVALID'
...
Deleting chain `INVALID'

Flushing chain `INVALID'

Deleting chain `INVALID'

INVALID tcp opt -- in !lo out * 0.0.0.0/0 -> 0.0.0.0/0

INVALID tcp opt -- in * out !lo 0.0.0.0/0 -> 0.0.0.0/0


INVALID tcp opt in !lo out * ::/0 -> ::/0
INVALID tcp opt in * out !lo ::/0 -> ::/0

any idea?

TIA.
 
Old 03-24-2019, 07:23 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Quote:
Originally Posted by webx99 View Post
I use csf (Centos 6) 64bit and noticed some "invalid" when restarting csf. (..) any idea?
That's just a chain named "INVALID".
 
1 members found this post helpful.
Old 04-05-2019, 03:21 PM   #3
webx99
Member
 
Registered: Feb 2019
Distribution: Centos 7
Posts: 103

Original Poster
Rep: Reputation: 11
Quote:
Originally Posted by unSpawn View Post
That's just a chain named "INVALID".
Thanks for the reply

how can I delete that chain ?
 
Old 05-04-2019, 05:17 AM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
If it's part of this tools rule management you shouldn't.
 
1 members found this post helpful.
  


Reply

Tags
centos6, csf, iptables



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
valid packet returning to INPUT after going through INVALID chain vincix Linux - Networking 1 06-09-2017 12:01 AM
Configuring server for using CSF tuftystick Linux - Newbie 2 06-29-2009 10:20 AM
iptables good packet chain (instead of bad packet chain) win32sux Linux - Security 6 11-06-2008 06:02 AM
Installed CSF and FTP Got blocked... yah0m Linux - Server 1 08-15-2008 08:29 PM
plesk and csf I_AM Linux - General 1 06-28-2008 11:32 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 04:11 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration