OpenVZ Forum: Support » About commands and firewall rule

Home » General » Support » About commands and firewall rule

Show: Today's Messages :: Show Polls :: Message Navigator
E-mail to friend

Re: About commands and firewall rule [message #37169 is a reply to message #37166]

Mon, 24 August 2009 16:00

curx
Messages: 739
Registered: February 2006
Location: Nürnberg, Germany

Senior Member

Hi,

1) imo ... acl on simfs isnt supported ...

on starting the container the step are done:

first mounting the private local storage /vz/private/<CTID> to /vz/root/<CTID>
in the containers context the /-mount type is shown as simfs, to handle file and user quota via the kernel module simfs

CT0 (=HardwareNode) # modinfo simfs
[...]
description: Open Virtuozzo Simulation of File System
license: GPL v2
[...]

2)
>> when using the firewall rule I mentioned before, the error message below will show:
>> iptables: Unknown error 4294967295
>> it seems the kernel is NOT enable to support iptable function "hashlimit"

... btw, can you please pase the whole iptables rule, this error occurs

Seem on the hardware node the iptables module "ipt_hashlimit" isn't loaded and your ct shows nore hashlimit in the proc ip_tables_matches

# vzctl exec 102 'grep hash /proc/net/ip_tables_matches '

Bye,
Thorsten

Report message to a moderator