Firewall on Virtual Dedicated Server not Working

[originalmguy]

Hi all,

I have a Virtual Dedicated Server running Plesk 8.2.1 over Fedora Core 6.
Even though I edit the rules on the firewall module (i.e. deny ping), and it does not b*tch and seems to activate fine, when I test the rule (in this case ping) it doesn't work.
Any ideas? I have restarted the server as well.


Cheers,

M

 

[ib1984]

Is there any errors on activation? When you activate firewall through interface, try to log into the server by SSH and check iptables rules with 'iptables -L -n'

There are also some technical fine points about firewall on virtual environment running by Virtuozzo: they are described in KB

 

[originalmguy]

Hi and thanks for the reply.
When I try to run the module in Plesk this is what I get:

Error: Could not activate firewall configuration:

safeact: safeact: /usr/local/psa/var/modules/firewall/firewall-new.sh failed:
FATAL: Could not load /lib/modules/2.6.9-023stab043.1-smp/modules.dep: No such file or directory
iptables v1.3.8: can't initialize iptables table `nat': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.


proc_close() failed: var: Deprecated. Please use the public/private/protected modifiers

Any more ideas?
This is new to me

 

[ib1984]

It really looks like the issue with modules allowed for VE. Did you try KB article's recommendations?

 

[originalmguy]

Hi again,

Yes had a look but I do not have: /etc/sysconfig/vz
I'm running fedora core 6 and Plesk 8.2.1 not virtuozzo.
Sorry for my ignorance

 

[ib1984]

to check if you are running Plesk inside VE, check if /proc/vz/veinfo exists. If it does not, then you are running physical server. In this case try to run 'depmod -a' command to rebuild modules table.

However, kernel version ('2.6.9-023stab043.1-smp') indicates that it is Virtuozzo VE. If you do not have access to HW node, contact your service provider and ask them to enable iptables modules.

 

[originalmguy]

Wow!
I cant thank you enough for all you help and quick replies!
I'll look into this and post back what I find out.

Cheers,

M

 

[originalmguy]

Had a quick loo and yes /proc/vz/veinfo exists