Now it works, when I boot with a deactivated iptables. When I boot WITH iptables enabled and stop it afterwards, it doesn't. I think there is an issue with ip_conntracks which is not cleanly unloaded. Problem is: when I start iptables, it tells me:
/sbin/service iptables start
Flushing firewall rules: [ OK ]
Setting chains to policy ACCEPT: mangle filter [ OK ]
Unloading iptables modules: [FAILED]
Applying iptables firewall rules: [ OK ]
Loading additional iptables modules: ip_conntrack_netbios_n[ OK ]
When I stop it:
/sbin/service iptables stop
Flushing firewall rules: [ OK ]
Setting chains to policy ACCEPT: mangle filter [ OK ]
Unloading iptables modules: [FAILED]
dmesg:
ip_conntrack: parameter ip_conntrack_enable_ve0 is obsoleted. In ovzkernel >= 2.6.15 connection tracking on hardware node is enabled by default, use ip_conntrack_disable_ve0=1 parameter to disable.
ip_conntrack version 2.4 (8190 buckets, 65520 max) - 232 bytes per conntrack
VE: 481: started
eth0: no IPv6 routers present
lo: Disabled Privacy Extensions
And I get sporadic kernel panics:
OpenVZ Forum
Members
Search
Help
Register
Login
Home
