[Xen-users] Re: Xen and iptables

["Frank Church" <voipfc@xxxxxxxxxxxxxx>]

On 04/06/07, Frank Church <voipfc@xxxxxxxxxxxxxx> wrote:
> Is there something about Xen and iptables that I don't know about.
>
> I converted a VMWare Centos 4.4 system to run under Xen 3.0.2 on Ubuntu 6.06.
>
> When I try to run iptables on the Centos VM I get this error.
>
> iptables -L
> iptables v1.2.11: can't initialize iptables table `filter': iptables
> who? (do you need to insmod?)
> Perhaps iptables or your kernel needs to be upgraded.
>
> I suspect that there is something I have to do on the domU to get it
> to work or that I may have to copy something over from the domU.
>
> What should I do?
>
> /voipfc
After going through your responses I think I have to start from scratch.
When I run modprobe ip_tables there is no error report.

When I run iptables -L on the domU this is the output

Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere            PHYSDEV
match --physdev-in vif14.0
ACCEPT     all  --  anywhere             anywhere            PHYSDEV
match --physdev-in vif15.0
ACCEPT     all  --  anywhere             anywhere            PHYSDEV
match --physdev-in vif22.0
ACCEPT     all  --  anywhere             anywhere            PHYSDEV
match --physdev-in vif26.0
ACCEPT     all  --  anywhere             anywhere            PHYSDEV
match --physdev-in vif28.0

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination


What is the command to check that the iptables module is stored on the VM?

Is there supposed to be some .ko file in the modules directory?


modprobe ip_tables gives no error messages.on the VM

service ip_tables restart give the message below.
=============================================
Flushing firewall rules:                                   [  OK  ]
Setting chains to policy ACCEPT: filter                    [  OK  ]
Unloading iptables modules:                                [  OK  ]

/sbin/iptables -V on the VM outputs.
iptables v1.2.11

/sbin/iptables -V on the host outputs.
iptables v1.3.3

service apf restart on the VM outputs

Stopping APF:                                              [  OK  ]
Starting APF:Unable to load iptables module (ipt_state), aborting.
                                                          [  OK  ]

Do I have to insmod ipt_state etc for those modules to be installed?

Grepping modules.dep on both host and source shows that iptables is
installed. I copied the whole lib/modules folder to the VM, and  I
will restart it again to see if it works.

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users