OpenVZ iptables v1.3.5: can't initialize iptables table `nat': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. Solution

This error is annoying, in a Virtuozzo KB entry about this ip tables nat problem they say the kernel needs to be ugpraded:

Symptoms

The node runs 2.6.18-x kernel older than 2.6.18-028stab053.10.
NAT module does not work in container, you get "can't initialize iptables table 'nat'" error:

# iptables  -t nat  -L -n
iptables v1.2.11: can't initialize iptables table `nat': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded.

Resolution

Upgrade your kernel to the latest version (see http://kb.parallels.com/en/4004).

The problem is that I do have the latest kernel!

This is the latest VZ kernel from July:

Linux test.chi 2.6.18-194.8.1.el5.028stab070.2PAE #1 SMP Tue Jul 6 15:30:49 MSD 2010 i686 i686 i386 GNU/Linux

iptables v1.3.5: can't initialize iptables table `nat': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

 

 The real solution - manually load "iptable_nat" in the conf

I always read that the modules specified in /etc/sysconfig/iptables-config and /etc/vz/vz.conf are the modules that get loaded by default into all the containers...........but this is not true. "Modules you defined will be available for all Containers", no that wasn't the case for me.  I had to manually specify it for my container before it worked.

You have to explicitly tell each container what iptables modules it can have.

*Actually this is not true, if you get errors saying "X Module cannot be found", it means you have a mistake or linebreak in your vz.conf for IPTABLES.  Just fix it and then you'll be good.  What was I thinking, questioning Parallels?


Tags:

openvz, iptables, initialize, nat, insmod, kernel, upgraded, solutionthis, virtuozzo, kb, entry, ip, ugpraded, node, module, container, quot, resolution, upgrade, http, parallels, en, vz, linux, chi, pae, smp, tue, jul, msd, gnu, manually, iptable_nat, conf, modules, specified, etc, sysconfig, config, default, containers, defined, wasn, specify, explicitly, errors, linebreak, ll,

Latest Articles

  • Debian Ubuntu Mint rc-local service startup error solution rc-local.service: Failed at step EXEC spawning /etc/rc.local: Exec format error
  • MySQL Cheatsheet Guide and Tutorial
  • bash script kill whois or other command that is running for too long
  • Linux tftp listens on all interfaces and IPs by DEFAULT Security Risk Hole Solution
  • python import docx error
  • Cisco Unified Communications Manager Express Cheatsheet CUCME CME
  • Linux Ubuntu Debian Missing privilege separation directory: /var/run/sshd
  • bash how to count the number of columns or words in a line
  • bash if statement how to test program output without assigning to variable
  • RTNETLINK answers: Network is unreachable
  • Centos 7 how to save iptables rules like Centos 6
  • nfs tuning maximum amount of connections
  • qemu-kvm error "Could not initialize SDL(No available video device) - exiting"
  • Centos 7 tftpd will not work with selinux enabled
  • Debian Ubuntu Mint Howto Create Bridge (br0)
  • How To Control Interface that dhcpd server listens to on Debian based Linux like Mint and Ubuntu
  • LUKS unable to type password to unlock during boot on Debian, Ubuntu and Mint
  • Debian Ubuntu and Linux Mint Broken Kernel After Date - New Extra Module Naming Convention
  • Wordpress overwrites and wipes out custom htaccess rules and changes soluton
  • Apache htaccess and mod_rewrite how to redirect and force all URLs and visitors to the SSL / HTTPS version