On db server check if web server ip is blocked or allowed by grep search of CSF firewall csf -g webserver_ipaddress what output do you get ? also how are you editing the /etc/csf/csf.allow file ? vim, nano or vi ?