OpenVZ Forum: Support » *SOLVED* ip_conntrack

Home » General » Support » *SOLVED* ip_conntrack_ftp inside VE

Show: Today's Messages :: Show Polls :: Message Navigator
E-mail to friend

*SOLVED* ip_conntrack_ftp inside VE [message #13123]

Mon, 21 May 2007 08:32

goeldi
Messages: 92
Registered: June 2006

Member

Inside of a VE I have an application (Zope) which serves http and ftp.

Outside of the VE, I can make the ftp working by opening the corresponding port (8021) AND by loading ip_conntrack_ftp this way:

modprobe ip_conntrack_ftp ports=8021

How can I do that inside of a VE? I already have this line in the conf file of the VE:

IPTABLES="iptable_filter iptable_mangle ipt_limit ipt_multiport ipt_tos ipt_TOS ipt_REJECT ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_LOG ipt_length ip_conntrack ip_conntrack_ftp ip_conntrack_irc ipt_conntrack ipt_state ipt_helper iptable_nat ip_nat_ftp ip_nat_irc ipt_REDIRECT"

How can I give the VE the option "ports=8021"?

When i enter this manually, it doesn't work, so I assume it has to happen at VE start.

[Updated on: Mon, 21 May 2007 12:37] by Moderator

Report message to a moderator

Re: ip_conntrack_ftp inside VE [message #13133 is a reply to message #13123]

Mon, 21 May 2007 11:10

dim
Messages: 344
Registered: August 2005

Senior Member

This option should be inherited from host system.
So, the sequence is:
1) module is loaded with this option on HN itself;
2) VE started, with "ip_conntrack_ftp ip_conntrack" in IPTABLES variable;
3) check that this option is valid for VE.

If it doesn't work - please, specify kernel version.