<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<p dir="ltr">Apparently you need vzctl set $CTID --netfilter full --save (and restart CT for it to take effect).</p>
<p dir="ltr">A warning about TCP sack — most probably you can ignore, or file a bug to them saying it might not be configurable, or file a bug to us asking to make it configurable (if there is a serious reason why).</p>
<p dir="ltr">Kir.</p>
<div class="gmail_quote">On Jun 7, 2015 6:34 PM, Volker Janzen <voja@voja.de> wrote:<br type="attribution">
<blockquote class="quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
<div>Hi,</div>
<div><br>
</div>
<div>I'm trying to install Mail-in-a-box on a ubuntu-14.04-x86_64-minimal. Following configuration is used for the container:</div>
<div><br>
</div>
<div>
<div>PHYSPAGES="0:524288"</div>
<div>SWAPPAGES="0:131072"</div>
<div>DISKSPACE="62914560:62914560"</div>
<div>DISKINODES="131072:144179"</div>
<div>QUOTATIME="0"</div>
<div>CPUUNITS="1000"</div>
<div>NETFILTER="stateless"</div>
<div>HOSTNAME="<a href="http://example.com">example.com</a>"</div>
<div>VE_ROOT="/vz/root/$VEID"</div>
<div>VE_PRIVATE="/vz/private/$VEID"</div>
<div>OSTEMPLATE="ubuntu-14.04-x86_64-minimal"</div>
<div>ORIGIN_SAMPLE="vswap-256m"</div>
<div>NAMESERVER="<IPs>"</div>
<div>IP_ADDRESS="<IPs>"</div>
<div>IPTABLES="ipt_REJECT ipt_tos ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length ipt_state"</div>
<div><br>
</div>
</div>
<div>The Mail-in-a-box install script tries to setup ufw, when a couple of errors occur:</div>
<div><br>
</div>
<div>installing ufw ...</div>
<div>ERROR: problem running ufw-init</div>
<div>modprobe: ERROR: ../libkmod/libkmod.c:507 kmod_lookup_alias_from_builtin_file() could not open builtin file '/lib/modules/2.6.32-042stab104.1/modules.builtin.bin'</div>
<div>modprobe: FATAL: Module nf_conntrack_ftp not found.</div>
<div>modprobe: ERROR: ../libkmod/libkmod.c:507 kmod_lookup_alias_from_builtin_file() could not open builtin file '/lib/modules/2.6.32-042stab104.1/modules.builtin.bin'</div>
<div>modprobe: FATAL: Module nf_nat_ftp not found.</div>
<div>modprobe: ERROR: ../libkmod/libkmod.c:507 kmod_lookup_alias_from_builtin_file() could not open builtin file '/lib/modules/2.6.32-042stab104.1/modules.builtin.bin'</div>
<div>modprobe: FATAL: Module nf_conntrack_netbios_ns not found.</div>
<div>iptables-restore: line 4 failed</div>
<div>iptables-restore: line 77 failed</div>
<div>iptables-restore: line 31 failed</div>
<div>ip6tables-restore: line 4 failed</div>
<div>ip6tables-restore: line 73 failed</div>
<div>ip6tables-restore: line 31 failed</div>
<div>sysctl: permission denied on key 'net.ipv4.tcp_sack'</div>
<div><br>
</div>
<div>Can anybody tell me how I can solve these errors?</div>
<div><br>
</div>
<br>
Regards,<br>
<div> Volker</div>
<div><br>
</div>
</div>
</blockquote>
</div>
</body>
</html>