Hi all, > Like in this case. The mechanism for how access to iptables modules > inside a VPS works is no longer compatible as the config options for > that in vz.conf changed.
To elaborate on that: Once upon a time the global /etc/vz/vz.conf allowed us to specify which IPtables modules were available for usage in VPS's. This used to be a global setting, so all VPS's had access to the same IPtables modules. To simplify things we allowed access to all IPtables modules there. Recently (couple of months back) this behaviour changed and access to IPtables modules is now a configurable per VPS setting. That's when Aventurin{e} got an update that now allows to specify the "Netfilter" part of the OpenVZ configuration on a per VPS basis. If no NETFILTER line is in your VPS config (and any older VPS will not have this yet), then the default "stateless" is assumed. Which means: No access to NAT and contrack. And the APF needs contrack. -- With best regards Michael Stauber _______________________________________________ Blueonyx mailing list Blueonyx@mail.blueonyx.it http://mail.blueonyx.it/mailman/listinfo/blueonyx