6,534
edits
Changes
→Conntracks: fix for new kernels
=== Conntracks ===
{{Note|In the stable OpenVZ kernels later than 2.6.8, connection tracking is enabled by default so skip this section.}} In the old (those that are 2.6.8-based) OpenVZ kernels netfilter connection tracking for [[CT0]] is disabled by default. If you have a stateful firewall enabled on the host node (it is there by defaulton some distributions) you should either disable it, or enable connection tracking for [[CT0]].
To enable conntracks for CT0, add the following line to <code>/etc/modprobe.conf</code> file:
options ip_conntrack ip_conntrack_enable_ve0=1
</pre>
== Rebooting into OpenVZ kernel ==