CSF problem: error sending response: host unreachable

[Zion Ahead]

I get this error every few weeks on this cpanel box with csf firewall. Reboot won't fix it. This happens sporadically out of the blue for no reason every now and then.

Aug 21 08:04:24 server named[24185]: client 65.55.178.23#51588: error sending
response: host unreachable
Aug 21 08:04:25 server named[24185]: client 66.96.85.248#48646: error sending
response: host unreachable

ns1.domain.com returned (SERVFAIL)

Stopping csf does not resolve the problem. I uninstalled csf, that solved the problem but I need csf installed anyway.

Attached is the default csf setup when installed, so I don't know why this is happening.

[chae]

Same here every now & again I get the odd email warning stating host is unreachable or service has timeout, then it goes as quick as it came...can't too bad as the servers full of customers & no one has mentioned anything about outages, glitches or services not being reached.

[FC5_Slut]

I am also a bit curious as CSF is fairly useful...

[Infopro]

These queries should be asked on the CSF forums.
http://forum.configserver.com/

[Zion Ahead]

Still having this issue!!! This is getting ridiculous.

Everytime I stop csf and flush iptlabes, the server halts and has to be rebooted (after flushing iptables via iptables --flush command)

Kernel:
Linux 2.6.9-78.0.1.ELsmp #1 SMP Tue Aug 5 11:02:47 EDT 2008 i686 i686 i386 GNU/Linux

CSF:
v4.09

Cpanel:
WHM 11.23.2 cPanel 11.23.6-R27225

Now messages log says

bandmin: iptables: Resource temporarily unavailable

This is entirely now. Somehow CSF restarts itself also automatically after a few minutes, go figure.

All dns zones do not load until csf is stopped


After a reboot, zones start loading. All of a sudden after a few minutes of continual zone loading, it starts showing errors


Sep 22 08:59:27 server6 named[12052]: zone domain.ws/IN: loaded serial 2008062500
Sep 22 08:59:27 server6 named[12052]: zone domain.ws/IN: loaded serial 2008071803
Sep 22 08:59:27 server6 named[12052]: zone domain.ws/IN: loaded serial 2006081301
Sep 22 08:59:27 server6 named[12052]: zone domain.xom/IN: loaded serial 2006101901
Sep 22 08:59:27 server6 named[12052]: zone domain.co.za/IN: loaded serial 2008091500
Sep 22 08:59:27 server6 named[12052]: zone domain.co.za/IN: loaded serial 2008091500
Sep 22 08:59:27 server6 named[12052]: running
Sep 22 08:59:27 server6 kernel: Firewall: *UDP_OUT Blocked* IN= OUT=eth0 SRC=xxx.xxx.122.197 DST=86.35.14.42 LEN=144 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=53 DPT=29961 LEN=124
Sep 22 08:59:27 server6 named[12052]: client 86.35.14.42#29961: error sending response: host unreachable
Sep 22 08:59:27 server6 kernel: Firewall: *UDP_OUT Blocked* IN= OUT=eth0 SRC=xxx.xxx.122.197 DST=86.35.14.43 LEN=144 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=53 DPT=65457 LEN=124
Sep 22 08:59:27 server6 named[12052]: client 86.35.14.43#65457: error sending response: host unreachable
Sep 22 08:59:27 server6 named[12052]: client 86.35.14.43#11685: error sending response: host unreachable
Sep 22 08:59:27 server6 kernel: Firewall: *UDP_OUT Blocked* IN= OUT=eth0 SRC=xxx.xxx.122.197 DST=86.35.14.43 LEN=155 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=53 DPT=11685 LEN=135
Sep 22 08:59:27 server6 named: named startup succeeded
Sep 22 08:59:27 server6 named[12052]: client 24.29.103.10#35565: error sending response: host unreachable
Sep 22 08:59:27 server6 kernel: Firewall: *UDP_OUT Blocked* IN= OUT=eth0 SRC=xxx.xxx.122.197 DST=24.29.103.10 LEN=184 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=53 DPT=35565 LEN=164
Sep 22 08:59:27 server6 named[12052]: client 24.29.103.10#20850: error sending response: host unreachable
Sep 22 08:59:27 server6 kernel: Firewall: *UDP_OUT Blocked* IN= OUT=eth0 SRC=xxx.xxx.122.197 DST=24.29.103.10 LEN=184 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=53 DPT=20850 LEN=164
Sep 22 08:59:28 server6 named[12052]: client 86.35.14.43#35709: error sending response: host unreachable
Sep 22 08:59:28 server6 named[12052]: client 24.29.103.10#63588: error sending response: host unreachable
Sep 22 08:59:28 server6 named[12052]: client 24.29.103.10#18178: error sending response: host unreachable
Sep 22 08:59:28 server6 named[12052]: client 24.29.103.10#39041: error sending response: host unreachable
Sep 22 08:59:28 server6 named[12052]: client 24.29.103.10#2813: error sending response: host unreachable
Sep 22 08:59:28 server6 named[12052]: client 24.29.103.10#1422: error sending response: host unreachable
Sep 22 08:59:28 server6 named[12052]: client 24.29.103.10#16528: error sending response: host unreachable
Sep 22 08:59:28 server6 named[12052]: client 24.29.103.10#28807: error sending response: host unreachable
Sep 22 08:59:28 server6 named[12052]: client 24.29.103.10#32147: error sending response: host unreachable
Sep 22 08:59:28 server6 named[12052]: client 24.29.103.10#29489: error sending response: host unreachable
Sep 22 08:59:28 server6 named[12052]: client 24.29.103.10#12096: error sending response: host unreachable
Sep 22 08:59:28 server6 named[12052]: client 57.67.17.180#59088: error sending response: host unreachable