Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

CentOS 6.5 - OpenVZ - iptables bug - [resolved]

comebackcomeback Member
edited July 2014 in Help

Hello

I have a problem installing OpenVZ (http://lowendtalk.com/discussion/31691/new-installation-openvz-no-internet-access-resolved#latest)

The solution is to disable iptables:

iptables -F

The problem is that IPTABLES does not work.

Do you have any idea to solve this problem

thank you

Comments

  • What do you mean "iptables does not work"?

  • definedcodedefinedcode Member
    edited July 2014

    I'm on CentOS 6.5 and iptables works fine. Make sure iptables is not disabled for your bridge interface in /etc/sysctl.conf i.e:

    net.bridge.bridge-nf-call-ip6tables = 1
    net.bridge.bridge-nf-call-iptables = 1

    not

    net.bridge.bridge-nf-call-ip6tables = 0
    net.bridge.bridge-nf-call-iptables = 0

  • @definedcode said:
    What do you mean "iptables does not work"?

    Look at this message:

    IPTABLES works when I do not have Internet access

  • @definedcode said:
    I'm on CentOS 6.5 and iptables works fine. Make sure iptables is not disabled for your bridge interface in /etc/sysctl.conf i.e:

    net.bridge.bridge-nf-call-iptables = 0

    I configured correctly, but it does not work

  • @comeback said:
    I configured correctly, but it does not work

    I'm not sure what you mean by "it doesn't work" have you setup any rules? What are you expecting it to do..

  • jarjar Patron Provider, Top Host, Veteran
    edited July 2014

    There is a rule in iptables that needs to be removed for the change you've made to the OS by installing VZ. This is not a bug. The -F flag is flush, it removes the rules. You'll find this action taken by my openvz installation script for this reason.

    https://github.com/jarland/ServerScripts/blob/master/installopenvz-cent6.sh

  • fitvpnfitvpn Member

    IpTables can be enabled only by provider side,if you had a troubles with OpenVPN official script it just a bug with OVZ. Better dont use this script with OpenVZ

  • ATHKATHK Member

    @fitvpn said:
    IpTables can be enabled only by provider side,if you had a troubles with OpenVPN official script it just a bug with OVZ. Better dont use this script with OpenVZ

    Wrong post? I don't see OpenVPN mentioned anywhere :)

  • comebackcomeback Member
    edited July 2014

    I found the solution, I modified the file:

    /etc/modprobe.d/openvz.conf

    options nf_conntrack ip_conntrack_disable_ve0=1

    To

    options nf_conntrack ip_conntrack_disable_ve0=0

Sign In or Register to comment.