OpenVZ iptables v1.3.5: can't initialize iptables table `nat': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. Solution

This error is annoying, in a Virtuozzo KB entry about this ip tables nat problem they say the kernel needs to be ugpraded:

Symptoms

The node runs 2.6.18-x kernel older than 2.6.18-028stab053.10.
NAT module does not work in container, you get "can't initialize iptables table 'nat'" error:

# iptables  -t nat  -L -n
iptables v1.2.11: can't initialize iptables table `nat': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded.

Resolution

Upgrade your kernel to the latest version (see http://kb.parallels.com/en/4004).

The problem is that I do have the latest kernel!

This is the latest VZ kernel from July:

Linux test.chi 2.6.18-194.8.1.el5.028stab070.2PAE #1 SMP Tue Jul 6 15:30:49 MSD 2010 i686 i686 i386 GNU/Linux

iptables v1.3.5: can't initialize iptables table `nat': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

 

 The real solution - manually load "iptable_nat" in the conf

I always read that the modules specified in /etc/sysconfig/iptables-config and /etc/vz/vz.conf are the modules that get loaded by default into all the containers...........but this is not true. "Modules you defined will be available for all Containers", no that wasn't the case for me.  I had to manually specify it for my container before it worked.

You have to explicitly tell each container what iptables modules it can have.

*Actually this is not true, if you get errors saying "X Module cannot be found", it means you have a mistake or linebreak in your vz.conf for IPTABLES.  Just fix it and then you'll be good.  What was I thinking, questioning Parallels?


Tags:

openvz, iptables, initialize, nat, insmod, kernel, upgraded, solutionthis, virtuozzo, kb, entry, ip, ugpraded, node, module, container, quot, resolution, upgrade, http, parallels, en, vz, linux, chi, pae, smp, tue, jul, msd, gnu, manually, iptable_nat, conf, modules, specified, etc, sysconfig, config, default, containers, defined, wasn, specify, explicitly, errors, linebreak, ll,

Latest Articles

  • Recommended SFP+ to RJ45 Adapter Module for Switch Juniper Cisco Ubiquiti TP-Link etc...
  • Bad Power Supply Issue Story Diagnosing Troubleshooting
  • Getting started with AI (Artificial Intelligence) in Linux / Ubuntu using by deploying LLM (Language Learing Models) using Ollama LLMA
  • microk8s kubernetes how to install OpenEBS
  • Flash LSI MegaRAID 2208 to IT mode in Linux Mint/Debian/Ubuntu
  • LSI MegaRAID in Linux Ubuntu / Centos Tutorial Setup Guide megacli
  • Convert-im6.q16: attempt to perform an operation not allowed by the security policy `PDF' @ error/constitute.c/IsCoderAuthorized/413. convert-im6.q16: no images defined `pts-time.jpg' @ error/convert.c/ConvertImageCommand/3258. solution ImageMagick P
  • Apache PHP sending expires header solution cannot use cache with CDN
  • How to install virt-manager in Mint 22/Ubuntu 22
  • Infiniband Guide
  • python mysql install error: /bin/sh: 1: mysql_config: not found /bin/sh: 1: mariadb_config: not found /bin/sh: 1: mysql_config: not found mysql_config --version
  • FreePBX 17 How To Add a Trunk
  • Docker Container Onboot Policy - How to make sure a container is always running
  • FreePBX 17 How To Add Phones / Extensions and Register
  • Warning: The driver descriptor says the physical block size is 2048 bytes, but Linux says it is 512 bytes. solution
  • Cisco How To Use a Third Party SIP Phone (eg. Avaya, 3CX)
  • Cisco Unified Communication Manager (CUCM) - How To Add Phones
  • pptp / pptpd not working in DD-WRT iptables / router
  • systemd-journald high memory usage solution
  • How to Install FreePBX 17 in Linux Debian Ubuntu Mint Guide