I recently migrated all users on one of my RHEL servers to a new CL 6.7 server with CSF/LFD installed, and now they all get blocked in the firewall when connecting via FTP. I've been using the same CSF/LFD settings on my RHEL servers for years, no issues, with the following important settings: PassivePortRange 30000 35000 is set in /etc/pure-ftpd.conf 30000:35000 is allowed in CSF TCP_IN I've made all of my CSF/LFD config settings on the CL box virtually identical to my CSF/LFD settings on my RHEL boxes. All servers are running cPanel 54 (release) , Pure-FTPD, PHP 5.5 native, MySQL 5.5, suPHP KernelCare is running on the CL box and LVE Manager and CL are kept updated. /var/log/messages is a steady stream of users getting blocked like this: Code: Feb 7 08:10:09 hostname kernel: [632812.934208] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=0c:c4:7a:47:04:b0:00:08:e3:ff:fe:bc:08:00 SRC=xxx.xxx.xxx.xxx DST=xxx.xxx.xxx.xxx LEN=64 TOS=0x08 PREC=0x40 TTL=50 ID=27457 DF PROTO=TCP SPT=57348 DPT=585 WINDOW=65535 RES=0x00 SYN URGP=0 Feb 7 06:06:08 hostname kernel: [625365.894691] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=0c:c4:7a:47:04:b0:00:08:e3:ff:fe:bc:08:00 SRC=xxx.xxx.xxx.xxx DST=xxx.xxx.xxx.xxx LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=21468 DF PROTO=TCP SPT=60678 DPT=43884 WINDOW=65535 RES=0x00 SYN URGP=0 Feb 7 05:30:19 hostname pure-ftpd: (?@xxx.xxx.xxx.xxx) [INFO] user is now logged in Feb 7 05:30:20 hostname kernel: [623216.877561] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=0c:c4:7a:47:04:b0:00:08:e3:ff:fe:bc:08:00 SRC=xxx.xxx.xxx.xxx DST=xxx.xxx.xxx.xxx LEN=52 TOS=0x08 PREC=0x40 TTL=116 ID=25741 DF PROTO=TCP SPT=57322 DPT=36337 WINDOW=65535 RES=0x00 SYN URGP=0 I've been chasing this issue down for days and I can't seem to find an answer anywhere I look, other than people saying to not use CSF. I've relied on CSF/LFD for years and don't ever wish to give it up. Plus it works perfectly with RHEL and never any problem with FTP blocking users. Has anyone here encountered this and found a solution? At this point I'd practically donate a kidney to resolve this. Thank you to anyone who takes a minute to respond.