[Xen-users] Re: Xen and iptables

["Frank Church" <voipfc@xxxxxxxxxxxxxx>]

On 04/06/07, Frank Church <voipfc@xxxxxxxxxxxxxx> wrote:
> On 04/06/07, Frank Church <voipfc@xxxxxxxxxxxxxx> wrote:
> > Is there something about Xen and iptables that I don't know about.
> >
> > I converted a VMWare Centos 4.4 system to run under Xen 3.0.2 on Ubuntu 6.06.
> >
> > When I try to run iptables on the Centos VM I get this error.
> >
> > iptables -L
> > iptables v1.2.11: can't initialize iptables table `filter': iptables
> > who? (do you need to insmod?)
> > Perhaps iptables or your kernel needs to be upgraded.
> >
> > I suspect that there is something I have to do on the domU to get it
> > to work or that I may have to copy something over from the domU.
> >
> > What should I do?
> >
> > /voipfc
> >
>
> After going through your responses I think I have to start from scratch.
> When I run modprobe ip_tables there is no error report.
>
> When I run iptables -L on the domU this is the output
>
> Chain INPUT (policy ACCEPT)
> target     prot opt source               destination
>
> Chain FORWARD (policy ACCEPT)
> target     prot opt source               destination
> ACCEPT     all  --  anywhere             anywhere            PHYSDEV
> match --physdev-in vif14.0
> ACCEPT     all  --  anywhere             anywhere            PHYSDEV
> match --physdev-in vif15.0
> ACCEPT     all  --  anywhere             anywhere            PHYSDEV
> match --physdev-in vif22.0
> ACCEPT     all  --  anywhere             anywhere            PHYSDEV
> match --physdev-in vif26.0
> ACCEPT     all  --  anywhere             anywhere            PHYSDEV
> match --physdev-in vif28.0
>
> Chain OUTPUT (policy ACCEPT)
> target     prot opt source               destination
>
>
> What is the command to check that the iptables module is stored on the VM?
>
> Is there supposed to be some .ko file in the modules directory?
>
>
> modprobe ip_tables gives no error messages.on the VM
>
> service ip_tables restart give the message below.
> =============================================
> Flushing firewall rules:                                   [  OK  ]
> Setting chains to policy ACCEPT: filter                    [  OK  ]
> Unloading iptables modules:                                [  OK  ]
>
>  /sbin/iptables -V on the VM outputs.
> iptables v1.2.11
>
>  /sbin/iptables -V on the host outputs.
> iptables v1.3.3
>
> service apf restart on the VM outputs
>
> Stopping APF:                                              [  OK  ]
> Starting APF:Unable to load iptables module (ipt_state), aborting.
>                                                            [  OK  ]
>
> Do I have to insmod ipt_state etc for those modules to be installed?
>
> Grepping modules.dep on both host and source shows that iptables is
> installed. I copied the whole lib/modules folder to the VM, and  I
> will restart it again to see if it works.
After I restarting the server I realized that apf had to be recompiled
against the modules and that fixed everything.

Thanks for the help

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users