Openvz - Module nf conntrack netbios ns not found in directory

Openvz - Module nf conntrack netbios ns not found in directory

Ошибка вида:

# ufw enable
Command may disrupt existing ssh connections. Proceed with operation (y|n)? y
ERROR: problem running ufw-init 
modprobe: ERROR: ../libkmod/libkmod.c:514 lookup_builtin_file() could not open builtin file '/lib/modules/2.6.32-
042stab120.11/modules.builtin.bin'
modprobe: FATAL: Module nf_conntrack_ftp not found in directory /lib/modules/2.6.32-042stab120.11
modprobe: ERROR: ../libkmod/libkmod.c:514 lookup_builtin_file() could not open builtin file '/lib/modules/2.6.32-
042stab120.11/modules.builtin.bin'
modprobe: FATAL: Module nf_nat_ftp not found in directory /lib/modules/2.6.32-042stab120.11
modprobe: ERROR: ../libkmod/libkmod.c:514 lookup_builtin_file() could not open builtin file '/lib/modules/2.6.32-
042stab120.11/modules.builtin.bin'
modprobe: FATAL: Module nf_conntrack_netbios_ns not found in directory /lib/modules/2.6.32-042stab120.11
iptables-restore: line 28 failed
sysctl: permission denied on key 'net.ipv4.tcp_sack'

решается догрузкой нужных модулей на основной ноде:

# modprobe nf_conntrack_netbios_ns
# modprobe nf_nat_ftp
# modprobe nf_conntrack_ftp

+Подключаем модули в конфиге контейнера:

# vi /etc/vz/conf/17750.conf
IPTABLES="ip_tables iptable_filter iptable_mangle ipt_limit ipt_multiport ipt_tos ipt_TOS ipt_REJECT ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_LOG ipt_length ip_conntrack ip_conntrack_ftp ipt_state iptable_nat ip_nat_ftp"
# vzctl set 17750 --netfilter full --save --setmode restart