If you are running bacula and csf you must add an exceptions to the following IP's in /etc/csf/csf.allow and /etc/csf/csf.ignore
127.0.0.1
96.125.182.114
10.4.0.114
10.4.0.11/8
67.22.128.170/20
67.22.128.0/20
96.125.182.0/20
Finally you also need to add this into /etc/csf/csf.conf
# Enable this option if you want lfd to ignore (i.e. don't block) IP addresses
# listed in csf.allow in addition to csf.ignore (the default). This option
# should be used with caution as it would mean that IP's allowed through the
# firewall from infected PC's could launch attacks on the server that lfd
# would ignore
IGNORE_ALLOW = "1"
# Allow incoming TCP ports
TCP_IN = "20,21,22,25,53,80,110,143,443,465,587,993,995,2077,2078,2082,2083,2086,2087,2095,2096,2222,26,9102,9103"
# Allow outgoing TCP ports
TCP_OUT = "20,21,22,25,37,43,53,80,110,113,443,587,873,993,995,2086,2087,2089,2703,9103,9102"
# Allow incoming UDP ports
UDP_IN = "20,21,53,9102"
# Allow outgoing UDP ports
# To allow outgoing traceroute add 33434:33523 to this list
UDP_OUT = "20,21,53,113,123,873,6277,24441,9103"