firewall on host and openvz question

RobFantini

Famous Member
May 24, 2012
2,089
118
133
Boston,Mass
Hello
On the host node we've installed a ConfigServer Scripts firewall. It is working well so far.

However from within a vz with a venet network we're unable to access the network [ ping and ssh out do not work]. When I changed the network type to bridged in the vz the network does work.

I tried adding this to /etc/vz/vz.conf and restarting vz :
Code:
IPTABLES="ipt_REJECT ipt_recent ipt_owner ipt_REDIRECT ipt_tos ipt_TOS ipt_LOG ip_conntrack ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length ipt_state iptable_nat ip_nat_ftp"

My question - when csf or a firewall is running on the host , is bridged network needed for vz?