IP Tables/csf

[jay89]

Hi,

I am using proxmox 3.1-3 and am trying to make IP tables work

i have loaded the config in /etc/vz/vz.conf

IPTABLES="ipt_REJECT ipt_recent ipt_owner ipt_REDIRECT ipt_tos ipt_TOS ipt_LOG ip_conntrack ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length ipt_state iptable_nat ip_nat_ftp"

but I am still getting the error below

Testing ipt_LOG...FAILED [FATAL Error: iptables: No chain/target/match by that name.] - Required for csf to function
Testing ipt_multiport/xt_multiport...FAILED [FATAL Error: iptables: No chain/target/match by that name.] - Required for csf to function
Testing ipt_state/xt_state...FAILED [FATAL Error: iptables: No chain/target/match by that name.] - Required for csf to function
Testing ipt_limit/xt_limit...FAILED [FATAL Error: iptables: No chain/target/match by that name.] - Required for csf to function
Testing ipt_recent...FAILED [Error: iptables: No chain/target/match by that name.] - Required for PORTFLOOD and PORTKNOCKING features
Testing xt_connlimit...FAILED [Error: iptables: No chain/target/match by that name.] - Required for CONNLIMIT feature
Testing ipt_owner/xt_owner...FAILED [Error: iptables: No chain/target/match by that name.] - Required for SMTP_BLOCK and UID/GID blocking features

RESULT: csf will not function on this server due to FATAL errors from missing modules [4]


below is the proxmox version

proxmox-ve-2.6.32: 3.1-109 (running kernel: 2.6.32-23-pve) pve-manager: 3.1-3 (running version: 3.1-3/dc0e9b0e) pve-kernel-2.6.32-23-pve: 2.6.32-109 lvm2: 2.02.98-pve4 clvm: 2.02.98-pve4 corosync-pve: 1.4.5-1 openais-pve: 1.1.4-3 libqb0: 0.11.1-2 redhat-cluster-pve: 3.2.0-2 resource-agents-pve: 3.9.2-4 fence-agents-pve: 4.0.0-1 pve-cluster: 3.0-7 qemu-server: 3.1-1 pve-firmware: 1.0-23 libpve-common-perl: 3.0-6 libpve-access-control: 3.0-6 libpve-storage-perl: 3.0-10 pve-libspice-server1: 0.12.4-1 vncterm: 1.1-4 vzctl: 4.0-1pve3 vzprocps: not correctly installed vzquota: 3.1-2 pve-qemu-kvm: 1.4-17 ksm-control-daemon: not correctly installed glusterfs-client: 3.4.0-2

 

[jay89]

Can anyone help.....

 

[snk]

Can anyone help.....

Try to change in /etc/vz/vz.conf:

IPTABLES="ipt_REJECT ipt_tos ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length"

to this:

IPTABLES="ipt_REJECT ipt_tos ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length ipt_recent ipt_owner ipt_REDIRECT ipt_TOS ipt_LOG ip_conntrack ipt_state iptable_nat ip_nat_ftp"

And restart CTs