Dietmar Maurer ha scritto:
>> by  default  all iptables modules that are loaded in the host system
> are accessible inside a container
>  
> so I guess that will not help?
> 
You're right:
I added xt_tcpudp xt_state and also checked that nf_conntrack_ipv4 was there on
/etc/vz/vz.conf

Also the above modules are loaded on HN, but still no luck.

When I try to load a rule wich use "state" I get an error on VM and on HN an
entry on /var/log/messages:

> Aug 28 17:09:19 localhost kernel: can't load conntrack support for proto=2

I googled for the error, but I didn't find any interesting (apart xt_tcpudp and
nf_conntrack_ipv4)

Any Idea?

--
Regards
Lorenzo Quatrini
_______________________________________________
Users mailing list
Users@openvz.org
https://openvz.org/mailman/listinfo/users

Reply via email to