up vote 1 down vote favorite
share [g+] share [fb]

Ive got VPS running on an Open VZ virtualisation instance. Unfortunately im having a lot of trouble getting a firewall up and running. Ive tried my usual UFW and shorewall, but neither of them would start up.

The company that runs the vps suggested i use csf here but that again wouldnt start up. I then tried modifying IPTables directly, but now that wont start up either. Reading through similar, it looks like its open VZ thats giving me the headache, but is there anyway i can get a firewall up and running on my current set up?

Cheers

link|improve this question
50% accept rate
Ufw, and others are using iptables. What is the error message that you get when adding a new rule with iptables? If it's something like "no INPUT chain" then your provider did not enable all the iptable capabilities for containers. Also you want to check if your on VENET or VETH. – Aleksandr Levchuk Oct 1 '11 at 16:04
feedback

1 Answer

up vote 1 down vote

You may need to enable some additional iptables modules for your VPS. You will need to ask your host to add the following iptables modules (for a typical firewall) support to your VPS,

ipt_REJECT ipt_tos ipt_TOS ipt_LOG ip_conntrack ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length ipt_state iptable_nat ip_nat_ftp

I am not sure, whether they are going to enable all this :)

link|improve this answer
+1 sparx. The conntrack issue is well documented with openvz. Probably won't have much luck getting that working. The OP is probably not going to succeed with this. – jdw Oct 1 '11 at 1:49
@jdw are you talking abou this documentation? wiki.openvz.org/… – Aleksandr Levchuk Oct 1 '11 at 16:09
That and others, yes. I haven't run across an OpenVZ host that would support this for me – jdw Oct 1 '11 at 17:15
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.