iptables: Unknown error 18446744073709551615

Portal Home > Knowledgebase > Articles Database > iptables: Unknown error 18446744073709551615

Posted by Behrooz_Ice, 09-02-2008, 05:52 PM
Hi, Iptables have problem on all vps. when we started csf firewall, we have got this error on all vps: iptables: Unknown error 18446744073709551615 and then iptables blocked all connection. i know that error is for xt_tcpudp module. please tell me how to load this module on all vps? also i have a full access to node server. OS Version: CentOS 5.2 IPtables Version: iptables v1.3.5 Kernel: 2.6.18-028stab053.17 #1 SMP Mon Jun 9 20:42:43 MSD 2008 x86_64 x86_64 x86_64 GNU/Linux Regards Haji
Posted by j2m2, 09-02-2008, 05:53 PM
you're going to have to ask your host to enable it
Posted by sspt, 09-02-2008, 06:01 PM
Also, it can be related with the numiptent barrier/limit, check your /proc/user_beancounters
Posted by Behrooz_Ice, 09-02-2008, 06:12 PM
Hi, i'm admin of node server. how to enable it on all vps accounts?
Posted by j2m2, 09-02-2008, 06:17 PM
umm so you're the user and the admin. ok you need to read this and enable it in /etc/conf/ip-tables.conf i think its called. anyways here are the modules: http://kb.parallels.com/en/746
Posted by Behrooz_Ice, 09-02-2008, 06:41 PM
Hi, thank you but node hardware server haven't /etc/conf/ip-tables.conf file but i cat iptables-config and i see this result: should i write all needed iptables modules on IPTABLES_MODULES="" ?
Posted by Behrooz_Ice, 09-02-2008, 07:37 PM
root@cl-t068-120cl ~]# vzctl set 102 --iptables ipt_REJECT --iptables ipt_tos --iptables ipt_TOS --iptables ipt_LOG --iptables ip_conntrack --iptables ipt_limit --iptables ipt_multiport --iptables iptable_filter --iptables iptable_mangle --iptables ipt_TCPMSS --iptables ipt_tcpmss --iptables ipt_ttl --iptables ipt_length --iptables ipt_state --iptables iptable_nat --iptables xt_tcpudp --iptables ip_nat_ftp --save Warning: unknown iptable module xt_tcpudp, skipped Bad parameter for --iptables: xt_tcpudp [root@cl-t068-120cl ~]#
Posted by Behrooz_Ice, 09-02-2008, 08:05 PM
Hi, Please Help me ...
Posted by SysAdminMan, 09-03-2008, 09:06 AM
Is this OpenVZ? If it is try - edit /etc/vz/vz.conf IPTABLES="iptable_filter iptable_mangle ipt_limit ipt_multiport ipt_tos ipt_TOS ipt_REJECT ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_LOG ipt_length ip_conntrack ip_conntrack_ftp ip_conntrack_irc ipt_conntrack ipt_state ipt_helper iptable_nat ip_nat_ftp ip_nat_irc ipt_REDIRECT" and restart the OpenVZ service of server. Might be more than you strictly need in there but you might need the others later on :-) Matt
Posted by iHubNet-Matt, 09-03-2008, 10:13 AM
What does this command result? lsmod | grep ipta
Posted by nice-price, 09-03-2008, 10:32 AM
Try the following on the Node: modprobe xt_tcpudp modprobe ip_conntrack ip_conntrack_enable_ve0=1
Posted by Vladimir Micovic, 05-12-2009, 08:33 AM
hello, I have same problem here and i pass all question which u have But still have problem. when i go to test iptables on vps, i got: how to resolve this problem? Thank you.
Posted by constantine, 12-15-2009, 02:36 PM
i have same problem too .
Posted by SysAdminMan, 12-15-2009, 02:43 PM
Do you run the OpenVZ node? If not just contact your VPS provider.
Posted by constantine, 12-15-2009, 02:49 PM
I have a root access in node .
Posted by zwtint, 12-15-2009, 03:05 PM
constantine: are you on msn ?
Posted by SysAdminMan, 12-15-2009, 03:30 PM
If you do like it says in the post above - edit /etc/vz/vz.conf IPTABLES="iptable_filter iptable_mangle ipt_limit ipt_multiport ipt_tos ipt_TOS ipt_REJECT ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_LOG ipt_length ip_conntrack ip_conntrack_ftp ip_conntrack_irc ipt_conntrack ipt_state ipt_helper iptable_nat ip_nat_ftp ip_nat_irc ipt_REDIRECT" and restart the OpenVZ service of server. That should solve your problem
Posted by constantine, 12-16-2009, 02:21 AM
Hi there , I fixed the problem by modify /etc/sysconfig/iptables-config and /etc/sysconfig/vz Thanks
Posted by JohnCS, 12-16-2009, 02:49 AM
First load modules in main node. Run following commands in main node After that you should add these modules to the iptable configuration module as follows # nano /etc/sysconfig/iptables-config Now you need to edit the vps node configuration file as follows ( example node is 101 )# nano /etc/sysconfig/vz-scripts/101.conf Restart the VPS vzctl restart 101