When i start CSF i cant connect VPS or download any data into it It appears i cant connect Linux VP?

Applications Cybersecurity
1

It appears i cant connect linux VPS server via SSH or i cant SCP any file to it and i cant wget any file TO it (from inside it) while CSF (Config Server Firewall, LFD is running. Just after isntall in default configuration and after changing TESTING mode to LIVE mode.

Trying to wget & install comething => stuck

[root@pvbvfxby ~]# wget http://www.inetbase.com/scripts/ddos/install.sh;chmod 0700 install.sh;
--2014-04-07 08:25:26--  http://www.inetbase.com/scripts/ddos/install.sh
Resolving www.inetbase.com... 184.173.190.146
Connecting to www.inetbase.com|184.173.190.146|:80...

Trying to SCP something into VPS:

amnesia@amnesia:~$ scp install.sh root@vpsipthere:/root
ERROR: Got error response from SOCKS server: 6 (TTL expired).
FATAL: failed to begin relaying via SOCKS.
ssh_exchange_identification: Connection closed by remote host
lost connection

Nothing in deny file/s

[root@pvbvfxby log]# cat /etc/*deny*

My computer IP not in iptables:

[root@pvbvfxby log]# iptables -L
Chain INPUT (policy DROP)
target     prot opt source               destination         
ACCEPT     tcp  --  google-public-dns-b.google.com  anywhere            tcp dpt:domain 
ACCEPT     udp  --  google-public-dns-b.google.com  anywhere            udp dpt:domain 
ACCEPT     tcp  --  google-public-dns-b.google.com  anywhere            tcp spt:domain 
ACCEPT     udp  --  google-public-dns-b.google.com  anywhere            udp spt:domain 
ACCEPT     tcp  --  google-public-dns-a.google.com  anywhere            tcp dpt:domain 
ACCEPT     udp  --  google-public-dns-a.google.com  anywhere            udp dpt:domain 
ACCEPT     tcp  --  google-public-dns-a.google.com  anywhere            tcp spt:domain 
ACCEPT     udp  --  google-public-dns-a.google.com  anywhere            udp spt:domain 
LOCALINPUT  all  --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere            
INVALID    tcp  --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ftp-data 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ftp 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ssh 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:smtp 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:domain 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:http 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:pop3 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:imap 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:https 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:smtps 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:submission 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:imaps 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:pop3s 
ACCEPT     udp  --  anywhere             anywhere            state NEW udp dpt:ftp-data 
ACCEPT     udp  --  anywhere             anywhere            state NEW udp dpt:ftp 
ACCEPT     udp  --  anywhere             anywhere            state NEW udp dpt:domain 
ACCEPT     icmp --  anywhere             anywhere            icmp echo-request limit: avg 1/sec burst 5 
ACCEPT     icmp --  anywhere             anywhere            icmp echo-reply limit: avg 1/sec burst 5 
ACCEPT     icmp --  anywhere             anywhere            icmp time-exceeded 
ACCEPT     icmp --  anywhere             anywhere            icmp destination-unreachable 
LOGDROPIN  all  --  anywhere             anywhere            

Chain FORWARD (policy DROP)
target     prot opt source               destination         

Chain OUTPUT (policy DROP)
target     prot opt source               destination         
ACCEPT     tcp  --  anywhere             google-public-dns-b.google.com tcp dpt:domain 
ACCEPT     udp  --  anywhere             google-public-dns-b.google.com udp dpt:domain 
ACCEPT     tcp  --  anywhere             google-public-dns-b.google.com tcp spt:domain 
ACCEPT     udp  --  anywhere             google-public-dns-b.google.com udp spt:domain 
ACCEPT     tcp  --  anywhere             google-public-dns-a.google.com tcp dpt:domain 
ACCEPT     udp  --  anywhere             google-public-dns-a.google.com udp dpt:domain 
ACCEPT     tcp  --  anywhere             google-public-dns-a.google.com tcp spt:domain 
ACCEPT     udp  --  anywhere             google-public-dns-a.google.com udp spt:domain 
LOCALOUTPUT  all  --  anywhere             anywhere            
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:domain 
ACCEPT     udp  --  anywhere             anywhere            udp dpt:domain 
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:domain 
ACCEPT     udp  --  anywhere             anywhere            udp spt:domain 
ACCEPT     all  --  anywhere             anywhere            
INVALID    tcp  --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ftp-data 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ftp 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ssh 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:smtp 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:domain 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:http 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:pop3 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:auth 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:https 
ACCEPT     udp  --  anywhere             anywhere            state NEW udp dpt:ftp-data 
ACCEPT     udp  --  anywhere             anywhere            state NEW udp dpt:ftp 
ACCEPT     udp  --  anywhere             anywhere            state NEW udp dpt:domain 
ACCEPT     udp  --  anywhere             anywhere            state NEW udp dpt:auth 
ACCEPT     udp  --  anywhere             anywhere            state NEW udp dpt:ntp 
ACCEPT     icmp --  anywhere             anywhere            icmp echo-reply 
ACCEPT     icmp --  anywhere             anywhere            icmp echo-request 
ACCEPT     icmp --  anywhere             anywhere            icmp time-exceeded 
ACCEPT     icmp --  anywhere             anywhere            icmp destination-unreachable 
LOGDROPOUT  all  --  anywhere             anywhere            

Chain ALLOWIN (1 references)
target     prot opt source               destination         

Chain ALLOWOUT (1 references)
target     prot opt source               destination         

Chain DENYIN (1 references)
target     prot opt source               destination         

Chain DENYOUT (1 references)
target     prot opt source               destination         

Chain INVALID (2 references)
target     prot opt source               destination         
INVDROP    all  --  anywhere             anywhere            state INVALID 
INVDROP    tcp  --  anywhere             anywhere            tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE 
INVDROP    tcp  --  anywhere             anywhere            tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG 
INVDROP    tcp  --  anywhere             anywhere            tcp flags:FIN,SYN/FIN,SYN 
INVDROP    tcp  --  anywhere             anywhere            tcp flags:SYN,RST/SYN,RST 
INVDROP    tcp  --  anywhere             anywhere            tcp flags:FIN,RST/FIN,RST 
INVDROP    tcp  --  anywhere             anywhere            tcp flags:FIN,ACK/FIN 
INVDROP    tcp  --  anywhere             anywhere            tcp flags:PSH,ACK/PSH 
INVDROP    tcp  --  anywhere             anywhere            tcp flags:ACK,URG/URG 
INVDROP    tcp  --  anywhere             anywhere            tcp flags:!FIN,SYN,RST,ACK/SYN state NEW 

Chain INVDROP (10 references)
target     prot opt source               destination         
DROP       all  --  anywhere             anywhere            

Chain LOCALINPUT (1 references)
target     prot opt source               destination         
ALLOWIN    all  --  anywhere             anywhere            
DENYIN     all  --  anywhere             anywhere            

Chain LOCALOUTPUT (1 references)
target     prot opt source               destination         
ALLOWOUT   all  --  anywhere             anywhere            
DENYOUT    all  --  anywhere             anywhere            

Chain LOGDROPIN (1 references)
target     prot opt source               destination         
DROP       tcp  --  anywhere             anywhere            tcp dpt:bootps 
DROP       udp  --  anywhere             anywhere            udp dpt:bootps 
DROP       tcp  --  anywhere             anywhere            tcp dpt:bootpc 
DROP       udp  --  anywhere             anywhere            udp dpt:bootpc 
DROP       tcp  --  anywhere             anywhere            tcp dpt:sunrpc 
DROP       udp  --  anywhere             anywhere            udp dpt:sunrpc 
DROP       tcp  --  anywhere             anywhere            tcp dpt:auth 
DROP       udp  --  anywhere             anywhere            udp dpt:auth 
DROP       tcp  --  anywhere             anywhere            tcp dpts:epmap:netbios-ssn 
DROP       udp  --  anywhere             anywhere            udp dpts:epmap:netbios-ssn 
DROP       tcp  --  anywhere             anywhere            tcp dpt:microsoft-ds 
DROP       udp  --  anywhere             anywhere            udp dpt:microsoft-ds 
DROP       tcp  --  anywhere             anywhere            tcp dpt:isakmp 
DROP       udp  --  anywhere             anywhere            udp dpt:isakmp 
DROP       tcp  --  anywhere             anywhere            tcp dpt:login 
DROP       udp  --  anywhere             anywhere            udp dpt:who 
DROP       tcp  --  anywhere             anywhere            tcp dpt:efs 
DROP       udp  --  anywhere             anywhere            udp dpt:router 
LOG        tcp  --  anywhere             anywhere            limit: avg 30/min burst 5 LOG level warning prefix `Firewall: *TCP_IN Blocked* ' 
LOG        udp  --  anywhere             anywhere            limit: avg 30/min burst 5 LOG level warning prefix `Firewall: *UDP_IN Blocked* ' 
LOG        icmp --  anywhere             anywhere            limit: avg 30/min burst 5 LOG level warning prefix `Firewall: *ICMP_IN Blocked* ' 
DROP       all  --  anywhere             anywhere            

Chain LOGDROPOUT (1 references)
target     prot opt source               destination         
LOG        tcp  --  anywhere             anywhere            tcp flags:FIN,SYN,RST,ACK/SYN limit: avg 30/min burst 5 LOG level warning uid prefix `Firewall: *TCP_OUT Blocked* ' 
LOG        udp  --  anywhere             anywhere            limit: avg 30/min burst 5 LOG level warning uid prefix `Firewall: *UDP_OUT Blocked* ' 
LOG        icmp --  anywhere             anywhere            limit: avg 30/min burst 5 LOG level warning uid prefix `Firewall: *ICMP_OUT Blocked* ' 
DROP       all  --  anywhere             anywhere

when i do: service csf stop
connections starts working, when i start, it fails to connect, wget..

2

The LOGDROPIN rule will give you more information on exactly what it being rejected but a useful flag to add to the iptables -L is -v as that also shows the interface the rule applies to. If you post that result here, along with your ifconfig -a (& perhaps obfuscate any sensitive internal network info if you wish) we should be able to get to the bottom of this.

Edit:
Oh, wait, OP is banned... nevermind then.