Added new option LF_SPI. This option configures csf iptables as a Stateful Packet Inspection (SPI) firewall – the default. If the server has a broken stateful connection tracking kernel then this setting can be set to 0 to configure csf iptables to be a Static firewall, though some funtionality and security will be inevitably lost
Added common systemd logs to csf.logignore for new installs
Modify LF_IPSET in csf to print failure messages instead of aborting on error
On servers using systemd if firewalld found to be active, csf and lfd will not start until is is stopped and disabled as csf cannot be used with firewalld
Added option SYSTEMCTL to csf.conf as the location of the systemctl binary for use with servers using systemd