How to resolve csf xtables lock issue?

If you found this post helpful, kindly share it and show your support :)

If you are receiving below error while restarting/starting CSF

“Unable to check csf due to xtables lock, enable WAITLOCK in csf.conf”

You will need to enable “WAITLOCK” and LF_IPSET in the firewall configuration to resolve the issue.

You can follow below steps to enable “WAITLOCK” and LF_IPSET in the firewall configuration

  • To enable WAITLOCK
    • From WHM click on “ConfigServer Security & Firewall” under Plugin >> click on the button “Firewall configuration” >> Search for “WAITLOCK” and change the value from 0 to 1
  • To enable LF_IPSET
    • Search for LF_IPSET from Firewall configuration and change its status from ‘Off’ to ‘On’
  • Restart firewall.

From commandline, you can follow below steps to do the same.

  • Login to your server via SSH.
  • Open the csf configuration file
vi /etc/csf/csf.conf
  • Search for “LF_IPSET” and change the value from “0” to “1” and Search for “WAITLOCK” and change the value from 0 to 1
  • Restart csf service
csf -r

That’s it 🙂

Please cross check it from your end now and let me know the result.

Loading

Mohammed Noufal

I'm Mohammed Noufal, working as Server Admin for the last 10 years.  In my day-to-day life, l had to face different problems related to Web-hosting. On my website Errorlogz.com, you can find solutions for different Web-hosting-related problems. Sometimes, I spent hours searching/googling to find a solution. This inspired me to start a website that gives solutions to different Webhosting problems. This website includes basic Linux and windows commands, and different control panels like cPanel, Plesk, DirectAdmin, Webmin & so on. You can find solutions and or suggestions for different Web-hosting related problems from here. Hence I would like to say Errorlogz is your server protector.  I will be glad if Logdetect can help any one of the Server admins to find a solution to his problem.

You may also like...

Leave a Reply

Your email address will not be published. Required fields are marked *