Symptoms
Traffic is not blocked according to the "Host Access Control" rules.
Description
This issue is caused when nftables is missing or has an incorrect INPUT
chain in the inet
filter. The inet
filter INPUT
chain should look similar to the following.
table inet filter {
chain INPUT {
type filter hook input priority filter; policy accept;
counter packets 8374 bytes 19193427 jump cPanel-HostAccessControl
counter packets 8374 bytes 19193427 jump cP-Firewall-1-INPUT
}
Workaround
- Access the server's command line as the 'root' user via SSH or "Terminal" in WHM.
- Run the configure_firewall_for_cpanel script.
/scripts/configure_firewall_for_cpanel