Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


CentOS 6.5 - OpenVZ - iptables bug - [resolved]
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

CentOS 6.5 - OpenVZ - iptables bug - [resolved]

comebackcomeback Member
edited July 2014 in Help

Hello

I have a problem installing OpenVZ (http://lowendtalk.com/discussion/31691/new-installation-openvz-no-internet-access-resolved#latest)

The solution is to disable iptables:

iptables -F

The problem is that IPTABLES does not work.

Do you have any idea to solve this problem

thank you

Comments

  • What do you mean "iptables does not work"?

  • definedcodedefinedcode Member
    edited July 2014

    I'm on CentOS 6.5 and iptables works fine. Make sure iptables is not disabled for your bridge interface in /etc/sysctl.conf i.e:

    net.bridge.bridge-nf-call-ip6tables = 1
    net.bridge.bridge-nf-call-iptables = 1

    not

    net.bridge.bridge-nf-call-ip6tables = 0
    net.bridge.bridge-nf-call-iptables = 0

  • @definedcode said:
    What do you mean "iptables does not work"?

    Look at this message:

    IPTABLES works when I do not have Internet access

  • @definedcode said:
    I'm on CentOS 6.5 and iptables works fine. Make sure iptables is not disabled for your bridge interface in /etc/sysctl.conf i.e:

    net.bridge.bridge-nf-call-iptables = 0

    I configured correctly, but it does not work

  • @comeback said:
    I configured correctly, but it does not work

    I'm not sure what you mean by "it doesn't work" have you setup any rules? What are you expecting it to do..

  • jarjar Patron Provider, Top Host, Veteran
    edited July 2014

    There is a rule in iptables that needs to be removed for the change you've made to the OS by installing VZ. This is not a bug. The -F flag is flush, it removes the rules. You'll find this action taken by my openvz installation script for this reason.

    https://github.com/jarland/ServerScripts/blob/master/installopenvz-cent6.sh

  • fitvpnfitvpn Member

    IpTables can be enabled only by provider side,if you had a troubles with OpenVPN official script it just a bug with OVZ. Better dont use this script with OpenVZ

  • ATHKATHK Member

    @fitvpn said:
    IpTables can be enabled only by provider side,if you had a troubles with OpenVPN official script it just a bug with OVZ. Better dont use this script with OpenVZ

    Wrong post? I don't see OpenVPN mentioned anywhere :)

  • comebackcomeback Member
    edited July 2014

    I found the solution, I modified the file:

    /etc/modprobe.d/openvz.conf

    options nf_conntrack ip_conntrack_disable_ve0=1

    To

    options nf_conntrack ip_conntrack_disable_ve0=0

Sign In or Register to comment.