Host Access Control isn't working in AlmaLinux 8+

Symptoms

Traffic is not blocked according to the rules added in WHM via Home / Security Center / Host Access Control.

Cause 

The Host Access Controls adds entries in a chain in the nftables firewall to process the rules. This issue is typically caused when the INPUT chain of the inet filter for nftables is missing the Host Access Control chain. 

You can view your current nftables ruleset with the following command:

#  nft list table inet filter

The INPUT chain should at least contain the following:

CONFIG_TEXT: chain INPUT {
     type filter hook input priority filter; policy accept;
     counter packets 10 bytes 688 jump cPanel-HostAccessControl
     counter packets 10 bytes 688 jump cP-Firewall-1-INPUT
}

Resolution

1. Access the server's command line as the 'root' user via SSH or Terminal in WHM.

2. Run the configure_firewall_for_cpanel script:

   # /scripts/configure_firewall_for_cpanel