CSF on Openvz
untuk enable venet0 agar bisa terbuka firewallnya setelah di install CSF di master openvz
soluation is:
edit /etc/sysconfig/iptables and add
-A FORWARD -j ACCEPT -p all -s 0/0 -i venet0
-A FORWARD -j ACCEPT -p all -s 0/0 -o venet0
-A INPUT -i venet0 -j ACCEPT
-A OUTPUT -o venet0 -j ACCEPT
create file /etc/csf/csfpre.sh and enter all the extra rules directly into it prefixed with “iptables” so the contents of that file should look something like:
iptables -A INPUT -i venet0 -j ACCEPT
iptables -A OUTPUT -o venet0 -j ACCEPT
iptables -A FORWARD -j ACCEPT -p all -s 0/0 -i venet0
iptables -A FORWARD -j ACCEPT -p all -s 0/0 -o venet0
edit /etc/csf/csf.conf file and add
and search for
ETH_DEVICE = “” change to ETH_DEVICE = “venet+”
and other standar setting of csf.
then restart the csf.
thats all
sumber : http://forum.openvz.org/index.php?t=msg&goto=21263&

February 24, 2010
|
Posted by defomaz
Categories:



