Re: [Xen-users] problems with Iptables in DomU

[Cristian Livadaru <drac3@xxxxxxxxx>]

On Mon, Jul 24, 2006 at 01:20:48PM +0200, Markus Binder wrote:
> Christian,
> make sure your domU Kernel Modules under /lib/modules/<KernelVersion> have 
> the same vermagic and modversion as
> your domU Kernel ! Or try loading the ipt_filter module manually with 
> "modprobe -f" also see "man modprobe"

seem to be the same:

this is all from my domU

lcx:~# ls -l /lib/modules/
total 4
drwxr-xr-x  3 root root 4096 2006-07-23 20:19 2.6.12.6-xenU
lcx:~# uname -a
Linux lcx 2.6.12.6-xenU #7 SMP Sun Jul 23 20:17:59 CEST 2006 x86_64
GNU/Linux

and the modules are already loaded.

lsmod
Module                  Size  Used by
md5                     5888  1
ipv6                  288576  22
iptable_mangle          4608  0
ip_nat_irc              4480  0
ip_nat_tftp             3456  0
ip_nat_ftp              5504  0
iptable_nat            28732  3 ip_nat_irc,ip_nat_tftp,ip_nat_ftp
ip_conntrack_irc       74288  1 ip_nat_irc
ip_conntrack_tftp       6192  1 ip_nat_tftp
ip_conntrack_ftp       75056  1 ip_nat_ftp
ip_conntrack           52956  7
ip_nat_irc,ip_nat_tftp,ip_nat_ftp,iptable_nat,ip_conntrack_irc,ip_conntrack_tftp,ip_conntrack_ftp
iptable_filter          4736  0
ip_tables              23424  3
iptable_mangle,iptable_nat,iptable_filter


> 
> Regards,
> Markus
> 
> -----Urspr?ngliche Nachricht-----
> Von: xen-users-bounces@xxxxxxxxxxxxxxxxxxx 
> [mailto:xen-users-bounces@xxxxxxxxxxxxxxxxxxx] Im Auftrag von Cristian 
> Livadaru
> Gesendet: Montag, 24. Juli 2006 10:40
> An: xen-users@xxxxxxxxxxxxxxxxxxx
> Betreff: [Xen-users] problems with Iptables in DomU
> 
> Now that my xen is running, I wanted to set up dthe firewall on my domU but 
> all I get is this error:
> 
> lcx:~# iptables -L
> iptables v1.2.11: can't initialize iptables table `filter': Module is wrong 
> version Perhaps iptables or your kernel needs to be upgraded.
> 
> the modules for iptables are loaded:
> iptable_filter          4736  0
> ip_tables              23424  3
> iptable_mangle,iptable_nat,iptable_filter
> 
> I have the same problem with Xen 3.0.1 and 2.0 on dom0 it seems to work:
> 
> master:~# iptables -L
> Chain INPUT (policy ACCEPT)
> target     prot opt source               destination
> 
> I tripplechecked the howto and all kernel settings but can't figure where the 
> problem is.
> 
> Regards,
> 
> Cristian Livadaru
> 
> _______________________________________________
> Xen-users mailing list
> Xen-users@xxxxxxxxxxxxxxxxxxx
> http://lists.xensource.com/xen-users
> 

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users