iptables not working with XEN2.0 on Fedora Core 3

iptables not working with XEN2.0 on Fedora Core 3

[Rick]

Hello,

I have just installed XEN2.0 on a fresh installation of Fedora Core 3
and iptables does not work properly
=====================================================================
[root@aquarius ~]# /etc/init.d/iptables start
Applying iptables firewall rules: iptables-restore v1.2.11: iptables-restore:
unable to initialize table 'filter'

Error occurred at line: 3
Try `iptables-restore -h' or 'iptables-restore --help' for more information.
                                                          [FAILED]
=====================================================================

=====================================================================
[root@aquarius ~]# iptables -L
iptables v1.2.11: can't initialize iptables table `filter': Table does
not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
=====================================================================

I have just installed xen2.0 on a fresh fedora core 3 installation and my
iptables rules are those that were created by fedora core 3 installation:
==================================================
# Firewall configuration written by system-config-securitylevel
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT
-A RH-Firewall-1-INPUT -p 50 -j ACCEPT
-A RH-Firewall-1-INPUT -p 51 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT
===================================================

I have compiled vmlinuz-2.6.10-xen0 using the .config file that came
with XEN2.0 source. Do I need to modify the .config file to include
some extra modules ?

Thanks
Rick


-------------------------------------------------------
The SF.Net email is sponsored by: Beat the post-holiday blues
Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek.
It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt

Re: iptables not working with XEN2.0 on Fedora Core 3

[Natasha Jarymowycz]

On Thu, 13 Jan 2005 13:44:13 -0500, Rick <judicator3@gmail.com> wrote:

> Hello,
>
> I have just installed XEN2.0 on a fresh installation of Fedora Core 3
> and iptables does not work properly
[...]
> I have compiled vmlinuz-2.6.10-xen0 using the .config file that came
> with XEN2.0 source. Do I need to modify the .config file to include
> some extra modules ?

You will need to include the following in your kernel configuration:
   IP tables support
   Connection state match support
   Connection tracking match support
   Packet filtering
   REJECT target support

If using the menus, these can be found under
Device Drivers -> Networking Support -> Networking Options
    -> Network packet filtering -> IP: Netfilter Configuration


-Natasha


-------------------------------------------------------
The SF.Net email is sponsored by: Beat the post-holiday blues
Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek.
It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt