GICT knowledge base
Fix for “Error*: Unable to check csf due to xtables lock, enable WAITLOCK in csf.conf “
Published
If you are getting the error “error*: Unable to check csf due to xtables lock, enable WAITLOCK in csf.conf” you need to enable “WAITLOCK” in the firewall configuration and if you are still getting the same error you need to enable LF_IPSET in your csf.conf file. Please follow the below steps to enable LF_IPSET.
1) Login to your WHM interface.
2) Navigate to Home >> Plugins
3) Click on “ConfigServer Security & Firewall”
4) A new window will open and here click on the button “Firewall configuration”
5) On the next page, you can see the option ‘LF_IPSET’ and change its status from ‘Off’ to ‘On’.
6) Restart firewall.
You can also enable the same via command line.
1) Login to your server via SSH.
2) Open the csf configuration file.
# vi /etc/csf/csf.conf
3) Search for “LF_IPSET” and change the value from “0” to “1”
4) Restart csf service.
# csf -r
If you need any further help, please do reach our support department.
Related guides
How to Find Services That Need a Restart After Updates with needrestart
Find services using outdated libraries with needrestart on Ubuntu. Read restart reports, review automatic restart policy and plan maintenance safely.
Firewall and SecurityHow to Connect Two Servers Privately with WireGuard
Connect two servers with WireGuard and keep PostgreSQL on the tunnel. Verify peer traffic, private database access and denied public connections.
Firewall and SecurityInterServer HIPAA Hosting: BAA and Shared Responsibilities
Review InterServer HIPAA hosting responsibilities and download the BAA and provisioning checklist. Request service-specific coverage through a support ticket.
Firewall and SecurityHow to Sign and Verify Files with Minisign
Sign release files with Minisign, share an authenticated public key, verify downloads, and stop processing when signatures fail.