OpenVZ Forum


Home » General » Support » iptables: Error inserting x_tables (using iptables -t nat is not possible inside VE)
iptables: Error inserting x_tables [message #37807] Fri, 23 October 2009 08:33 Go to previous message
john33 is currently offline  john33
Messages: 10
Registered: September 2009
Location: France
Junior Member
Hi,

I'm trying to configure NAT inside a VE with this command:
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE


But I get this error:
Quote:

WARNING: Error inserting x_tables (/lib/modules/2.6.24-24-openvz/kernel/net/netfilter/x_tables .ko): Operation not permitted
FATAL: Error inserting ip_tables (/lib/modules/2.6.24-24-openvz/kernel/net/ipv4/netfilter/ip_ tables.ko): Operation not permitted
iptables v1.3.8: can't initialize iptables table `nat': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.



When I run lsmod in the VE the result is empty. And I know that loading a kernel module inside a VE is not allowed.
On the host however, the right iptables modules are listed in lsmod.

What is wrong with my configuration ? Here is the content of the VE conf file:
Quote:

# Configuration file generated by vzsplit for 100 VEs
# on HN with total amount of physical mem 32148 Mb
# low memory 32148 Mb, swap size 3718 Mb, Max treads 8000
# Resourse commit level 0:
# Free resource distribution. Any parameters may be increased
# Primary parameters
NUMPROC="1646:1646"
AVNUMPROC="823:823"
NUMTCPSOCK="1646:1646"
NUMOTHERSOCK="1646:1646"
VMGUARPAGES="58771:9223372036854775807"

# Secondary parameters
KMEMSIZE="67421143:74163257"
TCPSNDBUF="15731698:22473714"
TCPRCVBUF="15731698:22473714"
OTHERSOCKBUF="7865849:14607865"
DGRAMRCVBUF="7865849:7865849"
OOMGUARPAGES="58771:9223372036854775807"
PRIVVMPAGES="352626:387888"

# Auxiliary parameters
LOCKEDPAGES="3292:3292"
SHMPAGES="35262:35262"
PHYSPAGES="0:9223372036854775807"
NUMFILE="26336:26336"
NUMFLOCK="1000:1100"
NUMPTY="164:164"
NUMSIGINFO="1024:1024"
DCACHESIZE="14727704:15169536"
NUMIPTENT="20:20"
DISKSPACE="204799:225280"
DISKINODES="80000:88000"
CPUUNITS="10534"

DISK_QUOTA=no
VE_ROOT=/data/7016f358-4c78-4aa0-bfe6-5a9c64be2a5b/root
VE_PRIVATE=/data/7016f358-4c78-4aa0-bfe6-5a9c64be2a5b/privat e
OSTEMPLATE="ubuntu-8.04"
IPTABLES="ipt_REJECT x_tables ip_tables ipt_tos ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length"



Thanks Smile

[Updated on: Fri, 02 April 2010 10:45]

Report message to a moderator

 
Read Message
Read Message
Read Message
Previous Topic: server restarting after syslod restart
Next Topic: Server crashing ::ip_conntrack: CT 0: table full, dropping packet.
Goto Forum:
  


Current Time: Fri Jul 26 19:28:04 GMT 2024

Total time taken to generate the page: 0.03200 seconds