OpenVZ Forum - RDF feed
type: channel
items: *SOLVED* CentOS 5 - IPTables NAT problem
items: Re: CentOS 5 - IPTables NAT problem

*SOLVED* CentOS 5 - IPTables NAT problem
type: item
description: latest version of the kernel # uname -r 2.6.18-53.el5.028stab051.1 # iptables -t nat -L iptables v1.3.5: can't initialize iptables table `nat': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. # lsmod | grep nat <nothing> # modprobe -l | grep ip_nat /lib/modules/2.6.18-53.el5.028stab051.1/kernel/net/ipv4/netf ilter/ip_nat_tftp.ko /lib/modules/2.6.18-53.el5.028stab051.1/kernel/net/ipv4/netf ilter/ip_nat_sip.ko /lib/modules/2.6.18-53.el5.028stab051.1/kernel/net/ipv4/netf ilter/ip_nat_pptp.ko /lib/modules/2.6.18-53.el5.028stab051.1/kernel/net/ipv4/netf ilter/ip_nat_irc.ko /lib/modules/2.6.18-53.el5.028stab051.1/kernel/net/ipv4/netf ilter/ip_nat_h323.ko /lib/modules/2.6.18-53.el5.028stab051.1/kernel/net/ipv4/netf ilter/ip_nat_ftp.ko /lib/modules/2.6.18-53.el5.028stab051.1/kernel/net/ipv4/netf ilter/ip_nat_snmp_basic.ko /lib/modules/2.6.18-53.el5.028stab051.1/kernel/net/ipv4/netf ilter/ip_nat.ko /lib/modules/2.6.18-53.el5.028stab051.1/kernel/net/ipv4/netf ilter/ip_nat_amanda.ko # modprobe ip_nat WARNING: Error inserting ip_conntrack (/lib/modules/2.6.18-53.el5.028stab051.1/kernel/net/ipv4/net filter/ip_conntrack.ko): Unknown symbol in module, or unknown parameter (see dmesg) FATAL: Error inserting ip_nat (/lib/modules/2.6.18-53.el5.028stab051.1/kernel/net/ipv4/net filter/ip_nat.ko): Unknown symbol in module, or unknown parameter (see dmesg) # dmesg -c ip_conntrack: parameter ip_conntrack_enable_ve0 is obsoleted. In ovzkernel >= 2.6.15 connection tracking on hardware node is enabled by default, use ip_conntrack_disable_ve0=1 parameter to disable. ip_conntrack: Unknown parameter `=' ip_nat: Unknown symbol invert_tuplepr ip_nat: Unknown symbol ip_conntrack_untracked ip_nat: Unknown symbol ip_conntrack_htable_size ip_nat: Unknown symbol ip_conntrack_tcp_update ip_nat: Unknown symbol ip_conntrack_tuple_taken ip_nat: Unknown symbol ip_ct_get_tuple ip_nat: Unknown symbol ip_conntrack_alter_reply ip_nat: Unknown symbol __ip_conn…
creator: Thomasd
date: 2007-12-11T10:55:34-00:00

Re: CentOS 5 - IPTables NAT problem
type: item
description: It looks like conntracks are disabled on HW node. We recommend to disable connection tracking on HW node, but if You want to use this functionality please check the following places: Could you please: - show cat /proc/modprobe.conf file (options for ip_conntrack) - modinfo ip_conntrack (it explain the exact option name and its default value) thank you, Vasily Averin
creator: vaverin
date: 2007-12-11T14:14:33-00:00

Re: CentOS 5 - IPTables NAT problem
type: item
description: it works! here was the problem: I had "options ip_conntrack ip_conntrack_enable_ve0 = 1" but the spaces around the '=' were causing improper parameters to be passed to the ip_conntrack module.
creator: Thomasd
date: 2007-12-11T19:58:37-00:00