I have enabled connection tracking on the HN everywhere I know and ensured the module is loaded: Quote: [root@vps1 ~]# uname -r 2.6.18-92.1.18.el5.028stab060.2 [root@vps1 ~]# grep conn /etc/sysconfig/vz IPTABLES_MODULES="ipt_REJECT ipt_tos ipt_TOS ipt_LOG ip_conntrack ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length ipt_state iptable_nat ip_nat_ftp ip_conntrack_ftp ipt_conntrack ip_tables ip_conntrack_netbios_ns" [root@vps1 ~]# grep conn /etc/sysconfig/iptables-config IPTABLES_MODULES="ipt_REJECT ipt_tos ipt_TOS ipt_LOG ip_conntrack ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length ipt_state iptable_nat ip_nat_ftp" [root@vps1 ~]# lsmod | grep conn ip_conntrack_netbios_ns 35968 0 ip_conntrack 101012 5 vzrst,ip_nat,vzcpt,ip_conntrack_netbios_ns,xt_state nfnetlink 40392 2 ip_nat,ip_conntrack [root@vps1 ~]# grep IPT /etc/sysconfig/vz-scripts/42007.conf IPTENTRIES="3000:4000" IPTABLES_MODULES="ipt_REJECT ipt_tos ipt_TOS ipt_LOG ip_conntrack ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length ipt_state iptable_nat ip_nat_ftp ip_conntrack_ftp ipt_conntrack ip_tables ip_conntrack_netbios_n connection tracking not available in VE: Quote: [root@vps1 ~]# vzctl exec 42007 ls -al /proc/net/ip_conntrack ls: /proc/net/ip_conntrack: No such file or directory [root@vps1 ~]# I have restarted the VE, vz, and the node. Any help is greatly appreciated.
Hello, seems ip_conntrack is virtualized itself and should be workable but it's simply /proc/net/ip_conntrack file is not virtualized. I don't know why, may be nobody wants to use it. Anyway if you have any argumentations I think it worth filing a bug with feature request.
Thanks for the reply, but /proc/net/ip_conntrack exists in many other VEs in other servers. the problem here must be due to some configuration. Do you have any other ideas for me?
Hello, could you possibly specify kernels which have ip_conntrack inside VE and which don't have of course except 2.6.18-92.1.18.el5.028stab060.2 because you've also mentioned about it. And if it is possible briefly describe their configuration as you did in the first post.