WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

Re: [Xen-users] problems with Iptables in DomU

To: Markus Binder <Markus.Binder@xxxxxxxxxxxxxx>
Subject: Re: [Xen-users] problems with Iptables in DomU
From: Cristian Livadaru <drac3@xxxxxxxxx>
Date: Mon, 24 Jul 2006 14:44:48 +0200
Cc: xen-users@xxxxxxxxxxxxxxxxxxx
Delivery-date: Mon, 24 Jul 2006 05:45:35 -0700
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
In-reply-to: <F91A18B8B41BEA4496988E928B3AAE6D0DA857@xxxxxxxxxxxxxxxxxxxxxxxxxx>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References: <F91A18B8B41BEA4496988E928B3AAE6D0DA857@xxxxxxxxxxxxxxxxxxxxxxxxxx>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
User-agent: Mutt/1.5.11+cvs20060126
On Mon, Jul 24, 2006 at 01:20:48PM +0200, Markus Binder wrote:
> Christian,
> make sure your domU Kernel Modules under /lib/modules/<KernelVersion> have 
> the same vermagic and modversion as
> your domU Kernel ! Or try loading the ipt_filter module manually with 
> "modprobe -f" also see "man modprobe"

seem to be the same:

this is all from my domU

lcx:~# ls -l /lib/modules/
total 4
drwxr-xr-x  3 root root 4096 2006-07-23 20:19 2.6.12.6-xenU
lcx:~# uname -a
Linux lcx 2.6.12.6-xenU #7 SMP Sun Jul 23 20:17:59 CEST 2006 x86_64
GNU/Linux

and the modules are already loaded.

lsmod
Module                  Size  Used by
md5                     5888  1
ipv6                  288576  22
iptable_mangle          4608  0
ip_nat_irc              4480  0
ip_nat_tftp             3456  0
ip_nat_ftp              5504  0
iptable_nat            28732  3 ip_nat_irc,ip_nat_tftp,ip_nat_ftp
ip_conntrack_irc       74288  1 ip_nat_irc
ip_conntrack_tftp       6192  1 ip_nat_tftp
ip_conntrack_ftp       75056  1 ip_nat_ftp
ip_conntrack           52956  7
ip_nat_irc,ip_nat_tftp,ip_nat_ftp,iptable_nat,ip_conntrack_irc,ip_conntrack_tftp,ip_conntrack_ftp
iptable_filter          4736  0
ip_tables              23424  3
iptable_mangle,iptable_nat,iptable_filter


> 
> Regards,
> Markus
> 
> -----Urspr?ngliche Nachricht-----
> Von: xen-users-bounces@xxxxxxxxxxxxxxxxxxx 
> [mailto:xen-users-bounces@xxxxxxxxxxxxxxxxxxx] Im Auftrag von Cristian 
> Livadaru
> Gesendet: Montag, 24. Juli 2006 10:40
> An: xen-users@xxxxxxxxxxxxxxxxxxx
> Betreff: [Xen-users] problems with Iptables in DomU
> 
> Now that my xen is running, I wanted to set up dthe firewall on my domU but 
> all I get is this error:
> 
> lcx:~# iptables -L
> iptables v1.2.11: can't initialize iptables table `filter': Module is wrong 
> version Perhaps iptables or your kernel needs to be upgraded.
> 
> the modules for iptables are loaded:
> iptable_filter          4736  0
> ip_tables              23424  3
> iptable_mangle,iptable_nat,iptable_filter
> 
> I have the same problem with Xen 3.0.1 and 2.0 on dom0 it seems to work:
> 
> master:~# iptables -L
> Chain INPUT (policy ACCEPT)
> target     prot opt source               destination
> 
> I tripplechecked the howto and all kernel settings but can't figure where the 
> problem is.
> 
> Regards,
> 
> Cristian Livadaru
> 
> _______________________________________________
> Xen-users mailing list
> Xen-users@xxxxxxxxxxxxxxxxxxx
> http://lists.xensource.com/xen-users
> 

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

<Prev in Thread] Current Thread [Next in Thread>