You may have notice packet drops when CSF firewall is enabled and you are downloading something. The only reason is the option
PACKET_FILTER = “1″
By default the “PACKET_FILTER” is ON which drops packets that looks illegal or out of sequence. If it’s generating false alarms and causing the valid packet to drop, you should better turn OFF the option in /etc/csf/csf.conf file
PACKET_FILTER = “0″
Save the file and restart CSF firewall
CSF dropping the packets while dowloading