Uploaded image for project: 'OpenVZ'
  1. OpenVZ
  2. OVZ-6659 ipt_owner module support in Containers
  3. OVZ-6898

Document new feature: ipt_owner module does not work in CT

    XMLWordPrintable

    Details

      Description

      Ashley Moravek (ashlee):
      Module ipt_owner does not seem to work:

      # iptables -t nat -A OUTPUT -d 10.0.0.0/8 -p tcp -m tcp --dport 2751 -m owner --uid-owner 1001 -j ACCEPT
      iptables: Invalid argument. Run `dmesg' for more information.

      it works fine without the "-m owner --uid-owner 1001" part however fine.

      vz.conf contains:
      IPTABLES="ipt_REJECT ipt_tos ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length ipt_owner ip_tables iptable_nat"

      the same iptables .. command works on the host fine.

      the xt_owner module is loaded on the host.

      >Host OS:
      Debian 8.3

      >Guest OS:
      Debian 8.3

      Or has this been dropped in VZ7?

        Attachments

          Activity

            People

            Assignee:
            apavlenko Artem Pavlenko
            Reporter:
            apavlenko Artem Pavlenko
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: