xt_connlimit failed on the OpenVZ VPS, even its loaded on the host node

postcd · August 2016

Hi, do You have any idea where the problem can be?

ConfigServerFirewall test script failed with xt_connlimit error, but it seems to be loaded on the host node..

vzctl exec 3080 perl /etc/csf/csftest.pl|grep error

Testing xt_connlimit...FAILED [Error: iptables: Unknown error 18446744073709551615] - Required for CONNLIMIT feature

lsmod|grep connlimit

xt_connlimit 3254 5
nf_conntrack 80313 14 xt_connlimit,nf_conntrack_ipv6,xt_conntrack,xt_state,vzrst,vzcpt,nf_nat_ftp,nf_conntrack_ftp,iptable_nat,nf_nat_pptp,nf_conntrack_pptp,nf_conntrack_proto_gre,nf_nat,nf_conntrack_ipv4

cat /etc/vz/conf/3080.conf|grep NETFILTER

NETFILTER="full"

netfilter full and iptbles modules are there since VPS was created and it was restarted couple of the times.

daily · August 2016

Hi there, with all the threads you have opened up recently I would recommend a Managed experience. You won't have the hassle of dealing with any of this stuff, and you won't have to ~~bug us~~ ask us with a new thread each time you have a problem.

rds100 · August 2016

Or just hire an admin.

exception0x876 · August 2016

come on guys, obviously the free help from an entire lowend community is much better than some paid admin work.

Microlinux · August 2016

God forbid Google.

Nomad · August 2016

+1 For Google but I'm against "paid admin work" in this case.
How the heck is one supposed to learn stuff if in the smallest problem they're to look for a sysadmin.

@postccd,

Do google. It even points back here to LET where some people actually did like to share information: https://www.lowendtalk.com/discussion/29745/iptables-required-modules-not-available-in-openvz-container

postcd · August 2016

@Nomad

Thx for the link, yes, i googled before asking and i read yours mentioned topic, but can't find anything helpfull.

Acoording to CSF test script (perl /etc/csf/csftest.pl), all iptables modules works OK on the VPS, except this connlimit module, even it is available on the host node and netfilter is full in VPS .conf file and VPS was restarted.

Nomad · August 2016

@postcd said:
@Nomad

Thx for the link, yes, i googled before asking and i read yours mentioned topic, but can't find anything helpfull.

Acoording to CSF test script (perl /etc/csf/csftest.pl), all iptables modules works OK on the VPS, except this connlimit module, even it is available on the host node and netfilter is full in VPS .conf file and VPS was restarted.

@postcd,

Check out this link: http://internetlifeforum.com/security-protection/462-tutorial-installing-csf-config-server-firewall-linux/

Unfortunately I don't use OpenVZ in anyway so I'm not much of a help.