Changes

Jump to: navigation, search

IPv6

506 bytes added, 04:29, 17 November 2013
Added connection state kernel modules needed for ip6tables.
Removal is effective immediately and the host stops replying to echo requests.
 
==ip6tables==
If you will be using connection tracking in ip6tables (i.e. '-m state --state'), you'll need to enable extra kernel modules in the host /etc/vz.conf. Add 'ipt_state' to IPTABLES and 'nf_conntrack_ipv6' to IP6TABLES. They should look something like this:
 
<pre>
IPTABLES="ipt_REJECT ipt_tos ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length ipt_state"
 
IP6TABLES="ip6_tables ip6table_filter ip6table_mangle ip6t_REJECT nf_conntrack_ipv6"
</pre>
==See also==
14
edits

Navigation menu