[Users] Ulogd + iptables configuration

[Onur R. Bingol]

I have added

-----
IPTABLES="ip_tables ipt_REJECT ipt_tos ipt_limit ipt_multiport 
iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length 
ipt_helper ipt_state ipt_TOS ipt_conntrack ip_conntrack ip_conntrack_ftp 
ipt_LOG ipt_ULOG"
-----
line to /etc/sysconfig/iptables-config and /etc/vz/vz.conf still getting

-----
Warning: Unknown iptable module: ipt_ULOG, skipped
Restarting container
Stopping container ...
Container was stopped
.
.
.
-----

"lsmod | grep ipt_ULOG" output on the HW node,

-----
ipt_ULOG               42504  0
x_tables               52616  20 
xt_pkttype,iptable_nat,ipt_ULOG,ipt_LOG,xt_conntrack,ipt_TOS,xt_helper,xt_length,ipt_ttl,xt_tcpmss,ipt_TCPMSS,xt_multiport,xt_limit,ipt_tos,ipt_REJECT,xt_state,ip_tables,ip6t_REJECT,xt_tcpudp,ip6_tables
-----

I couldn't understand what I am missing

Onur Rauf Bingol


On 11.03.2012 04:52, ggw at unixservice.com wrote:
> On 3/10/2012 8:46 PM, Onur R. Bingol wrote:
>> Hello,
>>
>> I am trying to configure a Debian 6 container. In this container, I want
>> all iptables logs to be written in a MySQL DB. To achieve this, I am
>> using ulogd and ulogd-mysql packages on the container.
>>
>> On the HW node, which is a CentOS 5 machine, I enabled ipt_ULOG module
>> according to the OpenVZ User's Guide (i.e. by adding ipt_ULOG to
>> /etc/sysconfig(iptables-config file, and rebooting). I also added
>> ipt_ULOG to the container's configuration file and rebooted the
>> container. However, I am getting a warning like "ipt_ULOG not found,
>> skipping" while rebooting the container. As a result, I cannot install
>> ulogd and ulogd-mysql to the container due to errors about ipt_ULOG 
>> module.
>>
>> Are there any ideas to fix this issue?
>
> Onur,
>
>
> You need to start by including the modules in the host node 
> /etc/vz/vz.conf file iptables kernel module configuration line. Here 
> is a sample line:
>
> ## IPv4 iptables kernel modules
> IPTABLES="ipt_REJECT ipt_tos ipt_limit ipt_multiport iptable_filter 
> iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length"
>
> Then you need to restart vz for the changes to take effect.
>
> Cheers,
> Gary Wallis
>
>
>>
>> Thanks,
>>
>> Onur
>> _______________________________________________
>> Users mailing list
>> Users at openvz.org
>> https://openvz.org/mailman/listinfo/users
>>
>>
>
> _______________________________________________
> Users mailing list
> Users at openvz.org
> https://openvz.org/mailman/listinfo/users