From: "Vladimir V. Kamarzin" <vvk@vvk.pp.ru>
To: ALT Linux sysadmins' discussion <sysadmins@lists.altlinux.org>
Subject: Re: [Sysadmins] Вопросы по VZ
Date: Wed, 24 Nov 2010 16:30:25 +0500
Message-ID: <m339qrq7qm.fsf@vvk.distance.ru> (raw)
In-Reply-To: <AANLkTikFhd=rP-mR1idMjqhGjafzbu=WCpjQt7gzq2BW@mail.gmail.com> (Yuri Khachaturyan's message of "Wed, 24 Nov 2010 13:58:34 +0300")
>>>>> On 24 Nov 2010 at 15:58 "YK" == Yuri Khachaturyan writes:
YK> Не работает почему-то модуль multiport (при -m multiport и --dports ругается
YK> на синтаксис).
YK> Читал в мануале, что при создании VE нужно необходимые модули iptables
YK> подключать, но как это сделать с уже установленной системой?
YK> Также непонятная проблема:
YK> [root@relay ~]# iptables -S
YK> -P INPUT DROP
YK> -P FORWARD ACCEPT
YK> -P OUTPUT ACCEPT
YK> -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
Нужно на HN подгрузить xt_state и
# grep state /etc/vz/vz.conf
IPTABLES="ipt_REJECT ipt_tos ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length ipt_state"
--
vvk
prev parent reply other threads:[~2010-11-24 11:30 UTC|newest]
Thread overview: 15+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-11-20 14:14 ` Денис Смирнов
2010-11-21 7:14 ` Alexey Shabalin
2010-11-21 7:52 ` Yuri Khachaturyan
2010-11-20 14:16 ` Sergey
2010-11-20 16:35 ` Sergey
2010-11-20 17:35 ` Sergey
2010-11-21 9:54 ` Sergey
2010-11-21 12:28 ` Alexey Shabalin
2010-11-21 13:17 ` Anton Chernyshov
2010-11-21 14:40 ` Alexey I. Froloff
2010-11-25 11:20 ` Alexey Shabalin
2010-11-25 11:51 ` Sergey
2010-11-21 15:58 ` Mikhail A. Pokidko
2010-11-24 11:24 ` Mikhail A. Pokidko
2010-11-24 11:30 ` Vladimir V. Kamarzin [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=m339qrq7qm.fsf@vvk.distance.ru \
--to=vvk@vvk.pp.ru \
--cc=sysadmins@lists.altlinux.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
ALT Linux sysadmins discussion
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/sysadmins/0 sysadmins/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 sysadmins sysadmins/ http://lore.altlinux.org/sysadmins \
sysadmins@lists.altlinux.org sysadmins@lists.altlinux.ru sysadmins@lists.altlinux.com
public-inbox-index sysadmins
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.sysadmins
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git