Upgrades/downgrades of cpanel-csf sometimes fail to load firewall rules

Symptoms

Upgrades/downgrades of cpanel-csf sometimes fail to load firewall rules.

Description

The cpanel-csf package postinstall script restarts the CSF service, but firewall rules are rarely not loaded. The exact cause of this is unknown at this time.

We've opened an internal case for our development team to investigate this further. For reference, the case number is CPANEL-52091. Follow this article to receive an email notification when a solution is published in the product. 

Workaround

You can reload the firewall rules by running the following command as root.

# csf -ra