Configuring server for using CSF

tuftystick · 06-20-2009, 06:20 PM

Hello,

We are currently offering VPS hosting and the we have a problem when loading the modules in order for CSF to work correctly for VPS servers.

We have followed the following guide to make the changes;

Code:

If you get iptables errors when trying to start csf on a VPS then you most likely have missing iptables modules for your VPS.

If your hosting provider wants to know how to configure iptables correctly on a VPS server, then you should point them to this Parallels FAQ and have them follow it (plus to add ip_conntrack_ftp to the list of required modules):
http://kb.parallels.com/en/746

csf requires at least these iptables modules:

ip_tables
ipt_state
ipt_multiport
iptable_filter
ipt_limit
ipt_LOG
ipt_REJECT
ipt_conntrack
ip_conntrack
ip_conntrack_ftp
iptable_mangle


Other modules where available for additional functionality:

ipt_owner
ipt_recent
iptable_nat
ipt_REDIRECT

The VPS Host provider can test whether they have fixed the envrionment by running:

/etc/csf/csftest.pl

This should run without any FATAL errors. If any such errors are present, they have not done it correctly or are using a broken kernel on the VPS client.

If you suffer from "memory allocation" errors with iptables on a VPS, make sure that your numiptent setting (as mentioned in the Parallels FAQ) is set sufficiently high. We recommend having numiptent set to at least 1000.

If you still have problems, your VPS host provider should also consider this information:
http://forum.configserver.com/showpo...84&postcount=6
http://forum.configserver.com/showpo...36&postcount=8
http://forum.configserver.com/showpo...39&postcount=1

When we try running;

Quote:

modprobe MODULE

We get the following error for every module above;

Quote:

FATAL: Could not load /lib/modules/2.6.18-028stab062.3/modules.dep: No such file or directory

We have checked /lib/modules/ and the folder is empty.

Any help would be appreciated!!

Matir · 06-21-2009, 11:38 AM

Did you perform make modules_install after building your kernel? (I'm assuming it's custom-built). If it's not custom-built, what distribution are you using? Since it seems to be on a VPS, also make sure that you're performing the work in the host, not a guest.

tuftystick · 06-29-2009, 10:20 AM

We are using Virtuozzo on the Host and their kernel is broken, there are many problems with it.

We have searched every forum and added every module you basically can and it just won't work.

We can enable iptable_filter on the Host, but when trying to enable it via the VPS we get the following error;

Code:

FATAL: Could not load /lib/modules/2.6.18-028stab062.3/modules.dep: No such file or directory

Any help will be appreciated.